Command Manual – AAA & RADIUS & HWTACACS & EAD
Quidway S3900 Series Ethernet Switches-Release 1510
Chapter 1 AAA & RADIUS & HWTACACS
Configuration Commands
Huawei Technologies Proprietary
1-69
Note that:
z You are not allowed to assign the same IP address to both primary and
secondary authentication servers; otherwise, unsuccessful operation is
prompted.
z If you repeatedly use this command, the latest configuration overwrites the
previous one.
z You can remove an authentication server only when it is not being used by any
active TCP connections, and the removal impacts only packets forwarded
afterwards.
Related command: display hwtacacs.
Example
# Configure a primary authentication server.
<Quidway> system-view
System View: return to User View with Ctrl+Z.
[Quidway] hwtacacs scheme hwt1
[Quidway-hwtacacs-hwt1] primary authentication 10.163.155.13 49
1.3.10 primary authorization
Syntax
primary authorization ip-address [ port ]
undo primary authorization
View
HWTACACS scheme view
Parameter
ip-address: IP address of the server, a valid unicast address in dotted decimal format.
By default, the IP address of the primary authentication server is 0.0.0.0.
port: Port number of the server, which is in the range 1 to 65535 and defaults to 49.
Description
Use the primary authorization command to configure a primary HWTACACS
authorization server.
Use the undo primary authorization command to delete the configured primary
authorization server.
Note that:
z You are not allowed to assign the same IP address to both primary and
secondary authorization servers; otherwise, unsuccessful operation is prompted.