Specifying The Hwtacacs Accounting Servers - H3C LS-3100-52P-OVS-H3 Operation Manual

It is recommended to specify only the primary HWTACACS authorization server if backup is not
required.
If both the primary and secondary authorization servers are specified, the secondary one is used
when the primary one is not reachable.
The IP addresses of the primary and secondary authorization servers cannot be the same.
Otherwise, the configuration fails.
You can remove an authorization server only when no active TCP connection for sending
authorization packets is using it.

Specifying the HWTACACS Accounting Servers

Follow these steps to specify the HWTACACS accounting servers and perform related configurations:
To do...
Enter system view
Create a HWTACACS scheme
and enter HWTACACS scheme
view
Specify the primary
HWTACACS accounting server
Specify the secondary
HWTACACS accounting server
Enable the device to buffer
stop-accounting requests
getting no responses
Set the maximum number of
stop-accounting request
transmission attempts
It is recommended to specify only the primary HWTACACS accounting server if backup is not
required.
If both the primary and secondary accounting servers are specified, the secondary one is used
when the primary one is not reachable.
The IP addresses of the primary and secondary accounting servers cannot be the same. Otherwise,
the configuration fails.
You can remove an accounting server only when no active TCP connection for sending accounting
packets is using it.
Currently, HWTACACS does not support keeping accounts on FTP users.
Use the command...
system-view
hwtacacs scheme
hwtacacs-scheme-name
primary accounting
ip-address [ port-number ]
secondary accounting
ip-address [ port-number ]
stop-accounting-buffer
enable
retry stop-accounting
retry-times
1-32
Remarks
—
Required
Not defined by default
Required
Configure at least one of the
commands
No accounting server by default
Optional
Enabled by default
Optional
100 by default