H3C S5120-EI Series User Manual

1-31
To do… Use the command… Remarks
Specify the primary
HWTACACS authentication
server
primary authentication
ip-address [ port-number ]
Specify the secondary
HWTACACS authentication
server
secondary authentication
ip-address [ port-number ]
Required
Configure at least one of the
commands
No authentication server by
default
z It is recommended to specify only the primary HWTACACS authentication server if backup is not
required.
z If both the primary and secondary authentication servers are specified, the secondary one is used
when the primary one is not reachable.
z The IP addresses of the primary and secondary authentication servers cannot be the same.
Otherwise, the configuration fails.
z You can remove an authentication server only when no active TCP connection for sending
authentication packets is using it.
Specifying the HWTACACS Authorization Servers
Follow these steps to specify the HWTACACS authorization servers:
To do… Use the command… Remarks
Enter system view
system-view
—
Create a HWTACACS scheme
and enter HWTACACS scheme
view
hwtacacs scheme
hwtacacs-scheme-name
Required
Not defined by default
Specify the primary
HWTACACS authorization
server
primary authorization
ip-address [ port-number ]
Specify the secondary
HWTACACS authorization
server
secondary authorization
ip-address [ port-number ]
Required
Configure at least one of the
commands
No authorization server by
default

H3C S5120-EI Series Specifications

General

Brand	H3C
Model	S5120-EI Series
Category	Switch
Language	English