3Com 10014298 manual Configuring Hwtacacs

Configuring HWTACACS 231

4Configuring the TACACS accounting server and related featuresprimary accountingHWTACACS viewConfiguring the primary accounting server

secondary accountingHWTACACS viewConfiguring the secondary accounting server

retry stop-accountingHWTACACS viewEnabling stop-accounting packet retransmission and setting the allowed maximum number of transmission attempts

reset stop-accounting-buffer hwtacacs-schemeHWTACACS viewClearing the stop-accounting request packets that have no response

5Configuring the source address for HWTACACS packets sent from NASnas-ip HWTACACS viewOptional

hwtacacs nas-ipSystem viewRequired

6Setting the key of the TACACS serverkeyHWTACACS viewConfiguring keys

7Setting the username format for the TACACS serveruser-name-format HWTACACS viewConfiguring the format of user name

8Setting the data flow unit for the TACACS serverdata-flow-formatHWTACACS viewConfiguring flow traffic unit

9Setting the timers of the TACACS servertimer response-timeoutHWTACACS viewSetting the TACACS server response timeout time

timer quietHWTACACS viewSetting the waiting time before the primary TACACS server resumes the active state

timer realtime-accountingHWTACACS viewSetting the real-time accounting interval

Note:

Pay attention to the following when configuring a TACACS server:

HWTACACS server does not check whether a scheme is being used by users when changing most of HWTACS attributes, unless you delete the scheme.

By default, the TACACS server has no key.

In the above configuration tasks, creating HWTACACS scheme and configuring TACACS authentication/authorization server are required; all other tasks are optional and you can determine whether to perform these configurations as needed.

2.4.2 Creating a HWTACAS Scheme