1980 CHAPTER 129: HWTACACS CONFIGURATION COMMANDS

By default, the source IP address of a packet sent to the server is the IP address of the outbound port.

Note that:

Specifying a source address for the HWTACACS packets to be sent to the server can avoid the situation where the packets sent back by the HWTACACS server cannot reach the device as the result of a physical interface failure.

If you configure the command for more than one time, the last configuration takes effect.

The nas-ipcommand in HWTACACS scheme view is only for the current HWTACACS scheme, while the hwtacacs nas-ipcommand in system view is for all HWTACACS schemes. However, the nas-ipcommand in HWTACACS scheme view overwrites the configuration of the hwtacacs nas-ipcommand.

Related command: hwtacacs nas-ip.

Example # Set the IP address for the device to use as the source address of the HWTACACS packets to 10.1.1.1.

<Sysname> system-view

[Sysname] hwtacacs scheme hwt1

[Sysname-hwtacacs-hwt1] nas-ip 10.1.1.1

primary accounting (HWTACACS scheme view)

Syntax primary accounting ip-address [ port-number ]

undo primary accounting

View HWTACACS scheme view

Parameter ip-address: IP address of the server, a valid unicast address in dotted decimal notation. The default is 0.0.0.0.

port-number: Port number of the server. It ranges from 1 to 65535 and defaults to 49.

Description Use the primary accounting command to specify the primary HWTACACS accounting server.

Use the undo primary accounting command to remove the configuration.

Note that:

The IP addresses of the primary and secondary accounting servers cannot be the same. Otherwise, the configuration fails.

The HWTACACS service port configured on the device and that of the HWTACACS server must be consistent.

Page 1980
Image 1980
3Com MSR 30, MSR 50 manual Primary accounting Hwtacacs scheme view, Related command hwtacacs nas-ip