HP 6125G HP 6125G & 6125G/XG Blade Switches Security Configuration Gui - Page 42
Creating an HWTACACS scheme, Specifying the HWTACACS authentication servers
View all HP 6125G manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 42 highlights
Task Specifying the HWTACACS authentication servers Specifying the HWTACACS authorization servers Specifying the HWTACACS accounting servers and the relevant parameters Specifying the shared keys for secure HWTACACS communication Specifying the VPN to which the servers belong Setting the username format and traffic statistics units Specifying a source IP address for outgoing HWTACACS packets Setting timers for controlling communication with HWTACACS servers Displaying and maintaining HWTACACS Remarks Required Optional Optional Required Optional Optional Optional Optional Optional Creating an HWTACACS scheme The HWTACACS protocol is configured on a per scheme basis. Before performing other HWTACACS configurations, follow these steps to create an HWTACACS scheme and enter HWTACACS scheme view: Step Command 1. Enter system view. system-view 2. Create an HWTACACS scheme and enter HWTACACS scheme view. hwtacacs scheme hwtacacs-scheme-name Remarks N/A Not defined by default. NOTE: • Up to 16 HWTACACS schemes can be configured. • A scheme can be deleted only when it is not referenced. Specifying the HWTACACS authentication servers You can specify one primary authentication server and up to one secondary authentication server for an HWTACACS scheme. When the primary server is not available, any secondary server is used. In a scenario where redundancy is not required, specify only the primary server. Follow these guidelines when you specify HWTACACS authentication servers: • An HWTACACS server can function as the primary authentication server of one scheme and as the secondary authentication server of another scheme at the same time. • The IP addresses of the primary and secondary authentication servers cannot be the same. Otherwise, the configuration fails. • You can remove an authentication server only when no active TCP connection for sending authentication packets is using it. To specify HWTACACS authentication servers for an HWTACACS scheme: Step 1. Enter system view. Command system-view Remarks N/A 32