H3C S6812 Series Command Reference Manual page 1739

Syntax
hwtacacs nas-ip { ipv4-address | ipv6 ipv6-address }
undo hwtacacs nas-ip { ipv4-address | ipv6 ipv6-address }
Default
The source IP address of an HWTACACS packet sent to the server is the primary IP address of the
outbound interface.
Views
System view
Predefined user roles
network-admin
Parameters
ipv4-address: Specifies an IPv4 address, which must be an address of the device. The IP address
cannot be 0.0.0.0, 255.255.255.255, a class D address, a class E address, or a loopback address.
ipv6 ipv6-address: Specifies an IPv6 address, which must be a unicast address of the device and
cannot be a loopback address or a link-local address.
Usage guidelines
The source IP address of HWTACACS packets that a NAS sends must match the IP address of the
NAS that is configured on the HWTACACS server. An HWTACACS server identifies a NAS by IP
address. Upon receiving an HWTACACS packet, an HWTACACS server checks whether the source
IP address of the packet is the IP address of a managed NAS.
•
If the source IP address of the packet is the IP address of a managed NAS, the server
processes the packet.
•
If the source IP address of the packet is not the IP address of a managed NAS, the server drops
the packet.
As a best practice, specify a loopback interface address as the source IP address for outgoing
HWTACACS packets to avoid HWTACACS packet loss caused by physical port errors.
If you use both the nas-ip command and hwtacacs nas-ip command, the following guidelines
apply:
•
The setting configured by using the nas-ip command in HWTACACS scheme view applies only
to the HWTACACS scheme.
•
The setting configured by using the hwtacacs nas-ip command in system view applies to all
HWTACACS schemes.
•
The setting in HWTACACS scheme view takes precedence over the setting in system view.
You can specify only one source IPv4 address and one source IPv6 address in system view.
Examples
# Specify IP address 129.10.10.1 as the source address for HWTACACS packets.
<Sysname> system-view
[Sysname] hwtacacs nas-ip 129.10.10.1
Related commands
nas-ip (HWTACACS scheme view)
hwtacacs scheme
Use hwtacacs scheme to create an HWTACACS scheme and enter its view, or enter the view of an
existing HWTACACS scheme.
98