Optional) Configuring The Source Ip Address Of The Hwtacacs Server; Optional) Setting The Shared Key Of An Hwtacacs Server - Huawei Quidway S9300 Configuration Manual

1 AAA and User Management Configuration
By default, the IP address of the primary HWTACACS authorization server is 0.0.0.0 and the
port number is 0.
Step 4 (Optional) Run:
hwtacacs-server authorization ip-address [ port ] secondary
The IP address of the secondary HWTACACS authorization server is configured.
By default, the IP address of the secondary HWTACACS authorization server is 0.0.0.0 and the
port number is 0.
----End
1.6.5 (Optional) Configuring the Source IP Address of the
HWTACACS Server
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
hwtacacs-server template template-name
The HWTACACS server template view is displayed.
Step 3 Run:
hwtacacs-server source-ip ip-address
The source IP address of the HWTACACS server is configured.
By default, the source IP address of an HWTACACS server is 0.0.0.0. In this case, the S9300
uses the IP address of the outgoing interface as the source IP address of the HWTACACS server.
After you specify the source IP address of the HWTACACS server, the specified address is used
for the communication between the S9300 and the server. In this case, the HWTACACS server
uses the specified IP address to communicate with the S9300.
----End

1.6.6 (Optional) Setting the Shared Key of an HWTACACS Server

Context
Setting the shared key ensures the security of communication between the S9300 and an
HWTACACS server. To ensure the validity of the authenticator and the authenticated, the shared
keys set on the S9300 and the HWTACACS server must be the same.
Procedure
Step 1 Run:
system-view
1-24 Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
Issue 01 (2009-07-28)