Command Manual – Security
Quidway S8500 Series Routing Switches
Chapter 2 AAA and RADIUS/HWTACACS Protocol
Configuration Commands
Huawei Technologies Proprietary
2-56
Specifying the source address for sending HWTACACS packet avoids the
unreachability of packet returned from the server when the physical interface fails.
Generally, the Loopback interface address is recommended.
By default, the source IP address of the packets is the IP address of the interface of the
VLAN to which the port connecting the server belongs.
Related command: display hwtacacs and hwtacacs nas-ip.
Example
# Configure the source IP address for HWTACACS packets sent from the NAS (switch)
to 10.1.1.1.
[Quidway] hwtacacs scheme test1
[Quidway-hwtacacs-test1] nas-ip 10.1.1.1
2.3.9 primary accounting
Syntax
primary accounting ip-address [ port-number ]
undo primary accounting
View
HWTACACS view
Parameter
ip-address: IP address of the server, a valid unicast address in dotted decimal format.
port-number: Port number of the server, which is in the range 1 to 65535 and defaults to
49.
Description
Use the primary accounting command to configure a primary TACACS accounting
server.
Use the undo primary accounting command to delete the configured primary
TACACS accounting server.
By default, the IP address of the TACACS accounting server is all zeros.
You are not allowed to assign the same IP address to both primary and secondary
accounting servers.
If you repeatedly use this command, the latest configuration overwrites the previous
one.
You can remove a TACACS scheme accounting server only when no Active TCP
connection used to send accounting packets is now using the server, and the removal
impacts only packets forwarded afterwards.
To Next Page
Loading...
Need help?
General