234CHAPTER 9: AAA AND RADIUS OPERATION

Perform the following configuration in HWTACACS view.

Table 2-41 Configuring stop-accounting packet retransmission

OperationCommand

Enable stop-accounting packet retransmission and set the allowed maximum number of transmission attemptsretry stop-accounting retry-times

Disable stop-accounting packet retransmissionundo retry stop-accounting

Clear the stop-accounting request packets that have no responsereset stop-accounting-buffer hwtacacs-scheme hwtacacs-scheme-name

By default, stop-accounting packet retransmission is enabled, and the maximum number of transmission attempts is 300.

2.4.6Configuring Source Address for HWTACACS Packets Sent by NAS Perform the following configuration in the corresponding view.

Table 2-42 Configuring source address for HWTACACS packets sent by the NAS OperationCommand

Configure the source address for HWTACACS packets sent from the NAS (HWTACACS view).nas-ip ip-address

Delete the configured source address for HWTACACS packets sent from the NAS (HWTACACS view).undo nas-ip

Configure the source address for HWTACACS packets sent from the NAS (System view).hwtacacs nas-ip ip-address

Cancel the configured source address for HWTACACS packets sent from the NAS (System view).undo hwtacacs nas-ip

The HWTACACS view takes precedence over the system view when configuring the source address for HWTACACS packets sent from the NAS.

By default, the source address is not specified, and the interface address for packet sending is used as the source address.

2.4.7 Setting a Key for Securing the Communication with TACACS Server

When using a TACACS server as an AAA server, you can set a key to improve the communication security between the switch and the TACACS server.

Perform the following configuration in HWTACACS view.

Page 234
Image 234
3Com 10014298 manual Perform the following configuration in Hwtacacs view