Filter
Top Products
1980 CHAPTER 129: HWTACACS CONFIGURATION COMMANDS
By default, the source IP address of a packet sent to the server is the IP address of
the outbound port.
Note that:
■ Specifying a source address for the HWTACACS packets to be sent to the
server can avoid the situation where the packets sent back by the HWTACACS
server cannot reach the device as the result of a physical interface failure.
■ If you configure the command for more than one time, the last configuration
takes effect.
■ The nas-ip command in HWTACACS scheme view is only for the current
HWTACACS scheme, while the hwtacacs nas-ip command in system view is
for all HWTACACS schemes. However, the nas-ip command in HWTACACS
scheme view overwrites the configuration of the hwtacacs nas-ip command.
Related command: hwtacacs nas-ip.
Example # Set the IP address for the device to use as the source address of the HWTACACS
packets to 10.1.1.1.
<Sysname> system-view
[Sysname] hwtacacs scheme hwt1
[Sysname-hwtacacs-hwt1] nas-ip 10.1.1.1
primary accounting (HWTACACS scheme view)
Syntax primary accounting ip-address [ port-number ]
undo primary accounting
View HWTACACS scheme view
Parameter ip-address: IP address of the server, a valid unicast address in dotted decimal
notation. The default is 0.0.0.0.
port-number: Port number of the server. It ranges from 1 to 65535 and defaults to
49.
Description Use the
primary accounting command to specify the primary HWTACACS
accounting server.
Use the
undo primary accounting command to remove the configuration.
Note that:
■ The IP addresses of the primary and secondary accounting servers cannot be
the same. Otherwise, the configuration fails.
■ The HWTACACS service port configured on the device and that of the
HWTACACS server must be consistent.