3com 8807 Guia Do Utilizador
Configuring HWTACACS Protocol
259
Configuring the Source
Address for HWTACACS
Packets Sent by NAS
Perform the following configuration in the corresponding view.
The HWTACACS view takes precedence over the system view when configuring
the source address for HWTACACS packets sent from the NAS.
the source address for HWTACACS packets sent from the NAS.
By default, the source address is not specified, and the virtual interface of the
VLAN that contains the port to which the server connects for packet sending is
used as the source address.
VLAN that contains the port to which the server connects for packet sending is
used as the source address.
Setting a Key for
Securing the
Communication with
TACACS Server
When using a TACACS server as an AAA server, you can set a key to improve the
communication security between the switch and the TACACS server.
communication security between the switch and the TACACS server.
Perform the following configuration in HWTACACS view.
No key is configured by default.
Setting the Username
Format Acceptable to
the TACACS Server
Username is usually in the "userid@isp-name" format, with the domain name
following "@".
following "@".
If a TACACS server does not accept the username with domain name, you can
remove the domain name and resend it to the TACACS server.
remove the domain name and resend it to the TACACS server.
Perform the following configuration in HWTACACS view.
By default, each username sent to a TACACS server contains a domain name.
Table 234 Configure the source address for HWTACACS packets sent by the NAS
Operation
Command
Configure the source address for HWTACACS
packets sent from the NAS (HWTACACS view)
packets sent from the NAS (HWTACACS view)
nas-ip ip-address
Delete the configured source address for
HWTACACS packets sent from the NAS
(HWTACACS view)
HWTACACS packets sent from the NAS
(HWTACACS view)
undo nas-ip
Configure the source address for HWTACACS
packets sent from the NAS (System view)
packets sent from the NAS (System view)
hwtacacs nas-ip ip-address
Cancel the configured source address for
HWTACACS packets sent from the NAS
(System view)
HWTACACS packets sent from the NAS
(System view)
undo hwtacacs nas-ip
Table 235 Set a key for securing the communication with the HWTACACS server
Operation
Command
Configure a key for securing the
communication with the accounting,
authorization or authentication server
communication with the accounting,
authorization or authentication server
key { accounting | authorization |
authentication } string
authentication } string
Delete the configuration
undo key { accounting | authorization |
authentication }
authentication }
Table 236 Set the username format acceptable to the TACACS server
Operation
Command
Send username with domain name
user-name-format with-domain
Send username without domain name
user-name-format without-domain