Configuring Tacacs Accounting Servers - H3C S5100-SI Series Operation Manual

Operation Manual – AAA
H3C S5100-SI/EI Series Ethernet Switches
Set the IP address and
port number of the
primary TACACS
authorization server
Set the IP address and
port number of the
secondary TACACS
authorization server
Caution:
You are not allowed to configure the same IP address for both primary and
secondary authorization servers. If you do this, the system will prompt that the
configuration fails.
You can remove a server only when it is not used by any active TCP connection for
sending authorization messages.

2.3.4 Configuring TACACS Accounting Servers

Follow these steps to configure TACACS accounting servers:
Enter system view
Create a HWTACACS
scheme and enter its view
Set the IP address and
port number of the
primary TACACS
accounting server
Set the IP address and
port number of the
secondary TACACS
accounting server
To do...
primary authorization
ip-address [ port ]
secondary authorization
ip-address [ port ]
To do...
system-view
hwtacacs scheme
hwtacacs-scheme-name
primary accounting
ip-address [ port ]
secondary accounting
ip-address [ port ]
Use the command...
Use the command...
2-28
Chapter 2 AAA Configuration
Remarks
Required
By default, the IP address
of the primary
authorization server is
0.0.0.0, and the port
number is 0.
Optional
By default, the IP address
of the secondary
authorization server is
0.0.0.0, and the port
number is 0.
Remarks
—
Required
By default, no
HWTACACS scheme
exists.
Required
By default, the IP address
of the primary accounting
server is 0.0.0.0, and the
port number is 0.
Required
By default, the IP address
of the secondary
accounting server is
0.0.0.0, and the port
number is 0.