Hwtacacs Configuration Task List; Creating A Hwtacacs Scheme - H3C S5600 Series Operation Manual

Operation Manual – AAA
H3C S5600 Series Ethernet Switches

2.3 HWTACACS Configuration Task List

Complete the following tasks to configure HWTACACS:
Configuring the
TACACS client
Configuring the
TACACS server

2.3.1 Creating a HWTACACS Scheme

The HWTACACS protocol configuration is performed on a scheme basis. Therefore,
you must create a HWTACACS scheme and enter HWTACACS view before performing
other configuration tasks.
Follow these steps to create a HWTACACS scheme:
Enter system view
Create a HWTACACS
scheme and enter its view
Caution:
The system supports up to 16 HWTACACS schemes. You can delete a
HWTACACS scheme only when it is not referenced.
If the Fabric function is enabled on the switch, you cannot create any HWTACACS
scheme, because the two are exclusive to each other.
Creating a HWTACACS Scheme
Configuring TACACS Authentication Servers
Configuring TACACS Authorization Servers
Configuring TACACS Accounting Servers
Configuring Shared Keys for RADIUS
Messages
Configuring the Attributes of Data to be Sent to
TACACS Servers
Configuring the Timers Regarding TACACS
Servers
Refer to the configuration of TACACS servers.
To do...
system-view
hwtacacs scheme
hwtacacs-scheme-name
Task
Use the command...
2-26
Chapter 2 AAA Configuration
Remarks
Required
Required
Required
Optional
Optional
Optional
Optional
—
Remarks
—
Required
By default, no
HWTACACS scheme
exists.