Configuring Hwtacacs Accounting Servers - H3C S7500 Series Operation Manual

Operation Manual – AAA & RADIUS & HWTACACS & EAD
H3C S7500 Series Ethernet Switches
Caution:
The primary and secondary authorization servers cannot use the same IP address.
Otherwise, the system will prompt unsuccessful configuration.
You can remove a server only when it is not being used by any active TCP
connection for sending authorization packets.

1.5.4 Configuring HWTACACS Accounting Servers

Table 1-26 Configure HWTACACS accounting servers
Enter system view
Create a HWTACACS
scheme and enter its
view
Set the IP address and
port number of the
primary TACACS
accounting server
Set the IP address and
port number of the
secondary TACACS
accounting server
Enable the
stop-accounting
packets retransmission
function and set the
maximum number of
attempts
To do... Use the command...
system-view
hwtacacs scheme
hwtacacs-scheme-name
primary accounting
ip-address [ port ]
secondary accounting
ip-address [ port ]
retry stop-accounting
retry-times
Chapter 1 AAA & RADIUS & HWTACACS
—
Required
By default, no HWTACACS
scheme exists.
Required
By default, the IP address of
the primary accounting
server is 0.0.0.0, and the
port number is 0.
Required
By default, the IP address of
the secondary accounting
server is 0.0.0.0, and the
port number is 0.
Optional
By default, the
stop-accounting packets
retransmission function is
enabled and the system can
transmit a stop-accounting
request for 100 times.
1-35
Configuration
Remarks