Command Manual – Security 
Quidway S8500 Series Routing Switches 
Chapter 2  AAA and RADIUS/HWTACACS Protocol 
Configuration Commands
 
Huawei Technologies Proprietary 
2-61 
port-number: Port number of the server, which is in the range 1 to 65535 and defaults to 
49. 
Description 
Use the secondary accounting command to configure a secondary TACACS 
accounting server.  
Use the undo secondary accounting command to delete the configured secondary 
TACACS accounting server. 
By default, IP address of TACACS accounting server is all zeros. 
You are not allowed to assign the same IP address to both primary and secondary 
accounting servers. 
If you repeatedly use this command, the latest configuration overwrites the previous 
one. 
You can remove a TACACS scheme accounting server only when no Active TCP 
connection used to send accounting packets is now using the server, and the removal 
impacts only packets forwarded afterwards. 
Example 
# Configure a secondary accounting server. 
[Quidway] hwtacacs scheme test1 
[Quidway-hwtacacs-test1] secondary accounting 10.163.155.12 49 
2.3.16  secondary authentication 
Syntax 
secondary authentication ip-address [ port-number ] 
undo secondary authentication 
View 
HWTACACS view 
Parameter 
ip-address: IP address of the server, a valid unicast address in dotted decimal format. 
port-number: Port number of the server, which is in the range 1 to 65535 and defaults to 
49. 
Description 
Use the secondary authentication command to configure a secondary TACACS 
authentication server.