Nas-Ip (Hwtacacs Scheme View) - HP 6125XLG Command Reference Manual

Blade switch security command reference
Table of Contents

Advertisement

[Sysname] hwtacacs scheme hwt1
[Sysname-hwtacacs-hwt1] key authentication simple 123456
# Set the shared key for secure HWTACACS authorization communication to ok in plain text.
[Sysname-hwtacacs-hwt1] key authorization simple ok
# Set the shared key for secure HWTACACS accounting communication to hello in plain text.
[Sysname-hwtacacs-hwt1] key accounting simple hello
Related commands
display hwtacacs scheme

nas-ip (HWTACACS scheme view)

Use nas-ip to specify a source address for outgoing HWTACACS packets.
Use undo nas-ip to delete a source address for outgoing HWTACACS packets.
Syntax
nas-ip { ipv4-address | ipv6 ipv6-address }
undo nas-ip [ ipv6 ]
Default
The source IP address of an outgoing HWTACACS packet is that configured by using the hwtacacs
nas-ip command in system view. If the hwtacacs nas-ip command is not configured, the source IP address
is the IP address of the outbound interface.
Views
HWTACACS scheme view
Predefined user roles
network-admin
Parameters
ipv4-address: Specifies an IPv4 address, which must be an address of the device and cannot be 0.0.0.0,
255.255.255.255, a class D address, a class E address, or a loopback address.
ipv6 ipv6-address: Specifies an IPv6 address, which must be a unicast address of the device and cannot
be a loopback address or a link-local address.
Usage guidelines
The source IP address of the HWTACACS packets that a NAS sends must match the IP address of the
NAS that is configured on the HWTACACS server. An HWTACACS server identifies a NAS by IP address.
Upon receiving an HWTACACS packet, an HWTACACS server checks whether the source IP address of
the packet is the IP address of a managed NAS. If yes, the server processes the packet. If not, the server
drops the packet.
The setting configured by using the nas-ip command in HWTACACS scheme view is effective only for the
HWTACACS scheme, whereas that configured by using the hwtacacs nas-ip command in system view is
effective for all HWTACACS schemes. The setting in HWTACACS scheme view takes precedence.
If you execute the command multiple times, the most recent configuration takes effect.
Examples
# Set the source address for outgoing HWTACACS packets to 10.1.1.1 for HWTACACS scheme hwt1.
61

Hide quick links:

Advertisement

Table of Contents
loading

Table of Contents