Configuring Hwtacacs; Hwtacacs Tasks At A Glance; Creating An Hwtacacs Scheme; Specifying The Hwtacacs Authentication Servers - H3C SR8800-F Configuration Manual

Configuring HWTACACS

HWTACACS tasks at a glance

Tasks at a glance
(Required.)
(Required.)
(Optional.)
(Optional.)
(Required.)
(Optional.)
(Optional.)
(Optional.)
(Optional.)
(Optional.)

Creating an HWTACACS scheme

Create an HWTACACS scheme before performing any other HWTACACS configurations. You can
configure a maximum of 16 HWTACACS schemes. An HWTACACS scheme can be used by multiple
ISP domains.
To create an HWTACACS scheme:
Step
1. Enter system view.
2. Create an HWTACACS
scheme and enter
HWTACACS scheme view.

Specifying the HWTACACS authentication servers

You can specify one primary authentication server and a maximum of 16 secondary authentication
servers for an HWTACACS scheme. When the primary server is not available, the device searches
for the secondary servers in the order they are configured. The first secondary server in active state
is used for communication.
If redundancy is not required, specify only the primary server. An HWTACACS server can function as
the primary authentication server in one scheme and as the secondary authentication server in
another scheme at the same time.
To specify HWTACACS authentication servers for an HWTACACS scheme:
Step
1. Enter system view.
Creating an HWTACACS scheme
Specifying the HWTACACS authentication servers
Specifying the HWTACACS authorization servers
Specifying the HWTACACS accounting servers
Specifying the shared keys for secure HWTACACS communication
Specifying an MPLS L3VPN instance for the scheme
Setting the username format and traffic statistics units
Configuring HWTACACS stop-accounting packet buffering
Specifying the source IP address for outgoing HWTACACS packets
Setting HWTACACS timers
Command
system-view
Command
system-view
hwtacacs scheme
hwtacacs-scheme-name
42
Remarks
N/A
By default, no HWTACACS
schemes exist.
Remarks
N/A