Configuring Hwtacacs Accounting Servers - Huawei Quidway S3900 Series Operation Manual

Operation Manual – AAA & RADIUS & HWTACACS & EAD
Quidway S3900 Series Ethernet Switches-Release 1510
Operation
Set the IP address and
port number
primary
authorization server
Set the IP address and
port number
secondary
authorization server
Caution:
The primary and secondary authorization servers cannot use the same IP address.
Otherwise, the system will prompt unsuccessful configuration.
You can remove a server only when it is not used by any active TCP connection for
sending authorization packets.

1.5.4 Configuring HWTACACS Accounting Servers

Table 1-27 Configure HWTACACS accounting servers
Operation
Enter system view
Create a HWTACACS
scheme and enter its
view
Set the IP address and
port number
primary
accounting server
Command
of the primary
TACACS ip-address [ port ]
of the secondary
TACACS ip-address [ port ]
Command
system-view
hwtacacs
hwtacacs-scheme-name
of the primary
TACACS ip-address [ port ]
Huawei Technologies Proprietary
1-37
Chapter 1 AAA & RADIUS & HWTACACS
Required
By
authorization
address of the primary
authorization server is
0.0.0.0, and the port
number is 0.
Required
By
address
authorization
secondary
authorization server is
0.0.0.0, and the port
number is 0.
—
Required
scheme
By
HWTACACS
exists.
Required
By
accounting
address of the primary
accounting
0.0.0.0, and the port
number is 0.
Configuration
Description
default, the IP
default, the IP
of the
Description
default, no
scheme
default, the IP
server is