76
Default level
2: System level
Parameters
ip-address: IP address in dotted decimal notation. It must be an address of the device and cannot be
0.0.0.0, 255.255.255.255, a class D address, a class E address, or a loopback address.
vpn-instance vpn-instance-name: Specifies the MPLS L3VPN that the source IP address belongs to. vpn-
instance-name is a case-sensitive string of 1 to 31 characters. With a VPN specified, the command
specifies a private-network source IP address. With no VPN specified, the command specifies a public-
network source IP address.
Description
Use the hwtacacs nas-ip command to specify a source IP address for outgoing HWTACACS packets.
Use the undo hwtacacs nas-ip command to remove the configuration.
By default, the source IP address of a packet sent to the server is the IP address of the outbound interface.
The source IP address of HWTACACS packets that a NAS sends must match the IP address of the NAS
that is configured on the HWTACACS server. An HWTACACS server identifies a NAS by IP address.
Upon receiving an HWTACACS packet, an HWTACACS server checks whether the source IP address of
the packet is the IP address of any managed NAS. If yes, the server processes the packet. If not, the
server drops the packet.
You can specify up to 16 source IP addresses, which can include one public-network IP address at most. A
newly specified public-network source IP address overwrites the previous one. Each VPN can have only
one private-network source IP address specified. A private-network source IP address newly specified for a
VPN overwrites the previous one.
NOTE:
The setting by the nas-ip command in HWTACACS scheme view is only for the HWTACACS scheme,
whereas the setting by the hwtacacs nas-ip command in system view is for all HWTACACS schemes.
The setting in HWTACACS scheme view takes precedence.
Related commands: nas-ip.
Examples
# Set the IP address for the device to use as the source address of the HWTACACS packets to
129.10.10.1.
<Sysname> system-view
[Sysname] hwtacacs nas-ip 129.10.10.1
hwtacacs scheme
Syntax
hwtacacs scheme hwtacacs-scheme-name
undo hwtacacs scheme hwtacacs-scheme-name
View
System view
Default level
3: Manage level
To Next Page
Loading...
Need help?
General
