H3C Technologies H3C S7500E Series Switches - Manual (Page 50)

2-21
z If both the primary and secondary authentication servers are specified, the secondary one is used
when the primary one is not reachable.
z It is recommended to specify only the primary HWTACACS authentication server if backup is not
required.
z The IP addresses of the primary and secondary authentication servers cannot be the same.
Otherwise, the configuration fails.
z You can remove an authentication server only when no active TCP connection for sending
authentication packets is using it.
Specifying the HWTACACS authorization servers
Follow these steps to specify the HWTACACS authorization servers:
To do… Use the command… Remarks
Enter system view system-view —
Enter HWTACACS scheme
view
hwtacacs scheme
hwtacacs-scheme-name
—
Specify the primary
HWTACACS authorization
server
primary authorization ip-address
[ port-number ]
Specify the secondary
HWTACACS authorization
server
secondary authorization ip-address
[ port-number ]
Required
Configure at least one command.
No authorization server is
specified by default.
z If both the primary and secondary authorization servers are specified, the secondary one is used
when the primary one is not reachable.
z It is recommended to specify only the primary HWTACACS authorization server if backup is not
required.
z The IP addresses of the primary and secondary authorization servers cannot be the same.
Otherwise, the configuration fails.
z You can remove an authorization server only when no active TCP connection for sending
authorization packets is using it.
Specifying the HWTACACS accounting servers
Follow these steps to specify the HWTACACS accounting servers and perform related configurations: