HP 6125XLG R2306-HP 6125XLG Blade Switch Security Configuration Guide - Page 41
Specifying the HWTACACS authorization servers, active, Command, Remarks
View all HP 6125XLG manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 41 highlights
Specifying the HWTACACS authorization servers You can specify one primary authorization server and up to 16 secondary authorization servers for an HWTACACS scheme. When the primary server is not available, the device tries to communicate with the secondary servers in the order they are configured, and communicates with the first secondary server in active state. If no redundancy is needed, specify only the primary server. An HWTACACS server can function as the primary authorization server of one scheme and as the secondary authorization server of another scheme at the same time. To specify HWTACACS authorization servers for an HWTACACS scheme: Step 1. Enter system view. 2. Enter HWTACACS scheme view. 3. Specify HWTACACS authorization servers. Command Remarks system-view N/A hwtacacs scheme hwtacacs-scheme-name • Specify the primary HWTACACS authorization server: primary authorization { ipv4-address | ipv6 ipv6-address } [ port-number | key { cipher | simple } string | vpn-instance vpn-instance-name ] * • Specify a secondary HWTACACS authorization server: secondary authorization { ipv4-address | ipv6 ipv6-address } [ port-number | key { cipher | simple } string | vpn-instance vpn-instance-name ] * N/A Configure at least one command. By default, no authorization server is specified. Two HWTACACS authorization servers in a scheme, primary or secondary, cannot have the same combination of IP address, port number, and VPN. Specifying the HWTACACS accounting servers You can specify one primary accounting server and up to 16 secondary accounting servers for an HWTACACS scheme. When the primary server is not available, the device tries to communicate with the secondary servers in the order they are configured, and communicates with the first secondary server in active state. If no redundancy is needed, specify only the primary server. An HWTACACS server can function as the primary accounting server of one scheme and as the secondary accounting server of another scheme at the same time. HWTACACS does not support accounting for FTP users. To specify HWTACACS accounting servers for an HWTACACS scheme: Step 1. Enter system view. 2. Enter HWTACACS scheme view. Command system-view hwtacacs scheme hwtacacs-scheme-name Remarks N/A N/A 32