beautypg.com

H3C Technologies H3C WX3000E Series Wireless Switches User Manual

Page 52

background image

38

NOTE:

An HWTACACS server can function as the primary authorization server of one scheme and as the
secondary authorization server of another scheme at the same time.

The IP addresses of the primary and secondary authorization servers cannot be the same. Otherwise,
the configuration fails.

You can remove an authorization server only when no active TCP connection for sending authorization
packets is using it.

Specifying the HWTACACS accounting servers and the relevant parameters

You can specify one primary accounting server and one secondary accounting server for an

HWTACACS scheme so that the NAS can find a server for user accounting when using the scheme.

When the primary server is not available, the secondary server is used, if any. In a scenario where
redundancy is not required, specify only the primary server.
When the device receives a connection teardown request from a host or a connection teardown

command from an administrator, it sends a stop-accounting request to the accounting server. You can

enable buffering of non-responded stop-accounting requests to allow the device to buffer and resend a

stop-accounting request until it receives a response or the number of stop-accounting attempts reaches
the configured limit. In the latter case, the device discards the packet.
To specify HWTACACS accounting servers and set relevant parameters for an HWTACACS scheme:

Step Command

Remarks

1.

Enter system view.

system-view

N/A

2.

Enter HWTACACS scheme

view.

hwtacacs scheme
hwtacacs-scheme-name

N/A

3.

Specify HWTACACS
accounting servers.

Specify the primary HWTACACS

accounting server:
primary accounting ip-address

[ port-number ] *

Specify the secondary HWTACACS

accounting server:

secondary accounting ip-address

[ port-number ] *

Configure at least one
command.
No accounting server is

specified by default.

4.

Enable buffering of
stop-accounting requests to

which no responses are
received.

stop-accounting-buffer enable

Optional.
Enabled by default.

5.

Set the maximum number of

stop-accounting attempts.

retry stop-accounting retry-times

Optional.
100 by default.