To do...
Specify the unit for data flows or
packets to be sent to a
HWTACACS server
Set the source
IP address of
the device to
send
HWTACACS
packets
If a HWTACACS server does not support a username with the domain name, you can configure the
device to remove the domain name before sending the username to the server.
The nas-ip command in HWTACACS scheme view is only for the current HWTACACS scheme,
while the hwtacacs nas-ip command in system view is for all HWTACACS schemes. However, the
nas-ip command in HWTACACS scheme view overwrites the configuration of the hwtacacs
nas-ip command.
Setting Timers Regarding HWTACACS Servers
Follow these steps to set timers regarding HWTACACS servers:
To do...
Enter system view
Create a HWTACACS scheme
and enter HWTACACS scheme
view
Set the HWTACACS server
response timeout timer
Set the quiet timer for the
primary server
Set the real-time accounting
interval
Use the command...
data-flow-format { data
{ byte | giga-byte | kilo-byte
| mega-byte } | packet
{ giga-packet | kilo-packet |
mega-packet |
one-packet } }*
In HWTACACS
nas-ip ip-address
scheme view
quit
In system view
hwtacacs nas-ip ip-address
Use the command...
system-view
hwtacacs scheme
hwtacacs-scheme-name
timer response-timeout
seconds
timer quiet minutes
timer realtime-accounting
minutes
1-34
Remarks
Optional
The defaults are as follows:
byte for data flows, and
one-packet for data packets.
Use either command
By default, the outbound port
serves as the source IP
address to send HWTACACS
packets.
Remarks
—
Required
Not defined by default
Optional
5 seconds by default
Optional
5 minutes by default
Optional
12 minutes by default