Command Manual – AAA RADIUS HWTACACS
H3C S7500E Series Ethernet Switches
Chapter 1 AAA/RADIUS/HWTACACS
Configuration Commands
1-72
Examples
# Configure the secondary accounting server.
<Sysname> system-view
[Sysname] hwtacacs scheme hwt1
[Sysname-hwtacacs-hwt1] secondary accouting 10.163.155.12 49
1.3.15 secondary authentication
Syntax
secondary authentication ip-address [ port-number ]
undo secondary authentication
View
HWTACACS scheme view
Parameters
ip-address: IP address of the server, a valid unicast address in dotted decimal notation.
The default is 0.0.0.0.
port-number: Port number of the server. It ranges from 1 to 65535 and defaults to 49.
Description
Use the secondary authentication command to specify the secondary HWTACACS
authentication server.
Use the undo secondary authentication command to remove the configuration.
Note that:
z The IP addresses of the primary and secondary authentication servers cannot be
the same. Otherwise, the configuration fails.
z The HWTACACS service port configured on the device and that of the
HWTACACS server must be consistent.
z If you configure the command for more than one time, the last configuration takes
effect.
z You can remove an authentication server only when no active TCP connection for
sending authentication packets is using it.
Related commands: display hwtacacs.
Examples
# Configure the secondary authentication server.
<Sysname> system-view
[Sysname] hwtacacs scheme hwt1
[Sysname-hwtacacs-hwt1] secondary authentication 10.163.155.13 49