Secondary Authentication - Huawei Quidway S8500 Series Command Manual

Command Manual – Security
Quidway S8500 Series Routing Switches
port-number: Port number of the server, which is in the range 1 to 65535 and defaults to
49.
Description
Use the secondary accounting command to configure a secondary TACACS
accounting server.
Use the undo secondary accounting command to delete the configured secondary
TACACS accounting server.
By default, IP address of TACACS accounting server is all zeros.
You are not allowed to assign the same IP address to both primary and secondary
accounting servers.
If you repeatedly use this command, the latest configuration overwrites the previous
one.
You can remove a TACACS scheme accounting server only when no Active TCP
connection used to send accounting packets is now using the server, and the removal
impacts only packets forwarded afterwards.
Example
# Configure a secondary accounting server.
[Quidway] hwtacacs scheme test1
[Quidway-hwtacacs-test1] secondary accounting 10.163.155.12 49

2.3.16 secondary authentication

Syntax
secondary authentication ip-address [ port-number ]
undo secondary authentication
View
HWTACACS view
Parameter
ip-address: IP address of the server, a valid unicast address in dotted decimal format.
port-number: Port number of the server, which is in the range 1 to 65535 and defaults to
49.
Description
Use the secondary authentication command to configure a secondary TACACS
authentication server.
Chapter 2 AAA and RADIUS/HWTACACS Protocol
Huawei Technologies Proprietary
2-61
Configuration Commands