H3C S3600 Series

Operation Manual – AAA-RADIUS-HWTACACS-EAD
H3C S3600 Series Ethernet Switches-Release 1510
Chapter 1 AAA & RADIUS & HWTACACS
Configuration
1-35
Table 1-24 Create a HWTACACS scheme
Operation Command Description
Enter system view
system-view
—
Create a HWTACACS
scheme and enter its view
hwtacacs scheme
hwtacacs-scheme-name
Required
By default, no HWTACACS
scheme exists.
Caution:
z The system supports up to 16 HWTACACS schemes. You can delete a
HWTACACS scheme only when it is not referenced.
z If the Fabric function is enabled on the switch, you cannot create any HWTACACS
scheme, because the two are exclusive to each other.
1.5.2 Configuring HWTACACS Authentication Servers
Table 1-25 Configure HWTACACS authentication servers
Operation Command Description
Enter system view
system-view
—
Create a HWTACACS
scheme and enter its view
hwtacacs scheme
hwtacacs-scheme-name
Required
By default, no HWTACACS
scheme exists.
Set the IP address and
port number of the
primary TACACS
authentication server
primary authentication
ip-address [ port ]
Required
By default, the IP address
of the primary
authentication server is
0.0.0.0, and the port
number is 0.
Set the IP address and
port number of the
secondary TACACS
authentication server
secondary
authentication
ip-address [ port ]
Required
By default, the IP address
of the secondary
authentication server is
0.0.0.0, and the port
number is 0.