3Com 8807 Configuration Manual page 257

Configuring HWTACACS
Authentication Servers
Configuring HWTACACS
Authorization Servers
Table 229 Create a HWTACACS scheme
Operation
Create a HWTACACS scheme and enter
HWTACACS view
Delete a HWTACACS scheme
By default, no HWTACACS scheme exists.
If the HWTACACS scheme you specify does not exist, the system creates it and
enters HWTACACS view. In HWTACACS view, you can configure the HWTACACS
scheme specifically.
The system supports up to 16 HWTACACS schemes. You can only delete the
schemes that are not being used.
Perform the following configuration in HWTACACS view.
Table 230 Configure HWTACACS authentication servers
Operation
Configure the HWTACACS primary
authentication server
Delete the HWTACACS primary
authentication server
Configure the HWTACACS secondary
authentication server
Delete the HWTACACS secondary
authentication server
The primary and secondary authentication servers cannot use the same IP address.
The default port number is 49.
If you execute this command repeatedly, the new settings will replace the old
settings.
A TACACS scheme authentication server can be deleted only when no Active TCP
connection used to send authentication packets is using the server.
Perform the following configuration in HWTACACS view.
Table 231 Configure HWTACACS authorization servers
Operation
Configure the primary HWTACACS
authorization server
Delete the primary HWTACACS authorization
server
Configure the secondary HWTACACS
authorization server
Delete the secondary HWTACACS
authorization server
Configuring HWTACACS Protocol
Command
hwtacacs scheme hwtacacs-scheme-name
undo hwtacacs scheme
hwtacacs-scheme-name
Command
primary authentication ip-address [
port-number ]
undo primary authentication
secondary authentication ip-address [
port-number ]
undo secondary authentication
Command
primary authorization ip-address [
port-number ]
undo primary authorization
secondary authorization ip-address [
port-number ]
undo secondary authorization
257