Configuring Tacacs Authentication Servers; Configuring Tacacs Authorization Servers - H3C S3100 8C SI Operation Manual

Operation Manual – AAA
H3C S3100 Series Ethernet Switches

2.3.2 Configuring TACACS Authentication Servers

Table 2-25 Configure TACACS authentication servers
Enter system view
Create a HWTACACS
scheme and enter its view
Set the IP address and
port number of the
primary TACACS
authentication server
Set the IP address and
port number of the
secondary TACACS
authentication server
Caution:
You are not allowed to configure the same IP address for both primary and
secondary authentication servers. If you do this, the system will prompt that the
configuration fails.
You can remove an authentication server setting only when there is no active TCP
connection that is sending authentication messages to the server.

2.3.3 Configuring TACACS Authorization Servers

Table 2-26 Configure TACACS authorization servers
Enter system view
Create a HWTACACS
scheme and enter its view
Operation
system-view
hwtacacs scheme
hwtacacs-scheme-name
primary authentication
ip-address [ port ]
secondary
authentication
ip-address [ port ]
Operation
system-view
hwtacacs scheme
hwtacacs-scheme-name
Command
Command
2-26
Chapter 2 AAA Configuration
Remarks
—
Required
By default, no
HWTACACS scheme
exists.
Required
By default, the IP address
of the primary
authentication server is
0.0.0.0, and the port
number is 0.
Optional
By default, the IP address
of the secondary
authentication server is
0.0.0.0, and the port
number is 0.
Remarks
—
Required
By default, no
HWTACACS scheme
exists.