Secondary Authorization - Huawei Quidway S8500 Series Command Manual

Command Manual – Security
Quidway S8500 Series Routing Switches
Use the undo secondary authentication command to delete the configured
secondary authentication server.
By default, IP address of TACACS authentication server is all zeros.
You are not allowed to assign the same IP address to both primary and secondary
authentication servers.
If you repeatedly use this command, the latest configuration overwrites the previous
one.
You can remove a TACACS scheme authentication server only when no Active TCP
connection used to send authentication packets is now using the server, and the
removal impacts only packets forwarded afterwards.
Related command: display hwtacacs.
Example
# Configure a secondary authentication server.
[Quidway] hwtacacs scheme test1
[Quidway-hwtacacs-test1] secondary authentication 10.163.155.13 49

2.3.17 secondary authorization

Syntax
secondary authorization ip-address [ port-number ]
undo secondary authorization
View
HWTACACS view
Parameter
ip-address: IP address of the server, a legal unicast address in dotted decimal format.
port-number: Port number of the server, ranging from 1 to 65535. By default, it is 49.
Description
Use the secondary authorization command to configure a secondary TACACS
authorization server.
Use the .undo secondary authorization command to delete the configured
secondary authorization server.
By default, IP address of TACACS authorization server is all zeros.
You are not allowed to assign the same IP address to both primary and secondary
authorization servers.
Chapter 2 AAA and RADIUS/HWTACACS Protocol
Huawei Technologies Proprietary
2-62
Configuration Commands