Specifying The Hwtacacs Authentication Servers; Specifying The Hwtacacs Authorization Servers - 3Com 4500G Family Configuration Manual

Up to 16 HWTACACS schemes can be configured.
A scheme can be deleted only when it is not referenced.

Specifying the HWTACACS Authentication Servers

Follow these steps to specify the HWTACACS authentication servers:
To do...
Enter system view
Create a HWTACACS scheme
and enter HWTACACS scheme
view
Specify the primary
HWTACACS authentication
server
Specify the secondary
HWTACACS authentication
server
It is recommended to specify only the primary HWTACACS authentication server if backup is not
required.
If both the primary and secondary authentication servers are specified, the secondary one is used
when the primary one is not reachable.
The IP addresses of the primary and secondary authentication servers cannot be the same.
Otherwise, the configuration fails.
You can remove an authentication server only when no active TCP connection for sending
authentication packets is using it.

Specifying the HWTACACS Authorization Servers

Follow these steps to specify the HWTACACS authorization servers:
To do...
Enter system view
Create a HWTACACS scheme
and enter HWTACACS scheme
view
Specify the primary
HWTACACS authorization
server
Use the command...
system-view
hwtacacs scheme
hwtacacs-scheme-name
primary authentication
ip-address [ port-number ]
secondary authentication
ip-address [ port-number ]
Use the command...
system-view
hwtacacs scheme
hwtacacs-scheme-name
primary authorization
ip-address [ port-number ]
1-32
Remarks
—
Required
Not defined by default
Required
Configure at least one of the
commands
No authentication server by default
Remarks
—
Required
Not defined by default
Required
Configure at least one of the