3com S7906E Instruccion De Instalación

Descargar
Página de 2621
 
1-39 
To do… 
Use the command… 
Remarks 
Specify the unit for data flows or 
packets to be sent to an 
HWTACACS server 
data-flow-format { data 
{ byte | giga-byte | kilo-byte 
| mega-byte } | packet 
{ giga-packet | kilo-packet | 
mega-packet 
| 
one-packet 
} }
Optional 
The defaults are as follows: 
byte for data flows, and  
one-packet for data packets. 
 
 
If an HWTACACS server does not support a username with the domain name, you can configure 
the device to remove the domain name before sending the username to the server. 
For level switching authentication, the user-name-format keep-original and user-name-format 
without-domain commands produce the same results, that is, usernames sent to the 
HWTACACS server carry no ISP domain name.  
 
Specifying the Source IP Address for HWTACACS Packets to be Sent 
After you specify the source IP address for HWTACACS packets to be sent, if the physical port for 
sending the HWTACACS packets fails, response packets from the server will be able to arrive at the 
NAS. 
Follow these steps to specify the source IP address for HWTACACS packets to be sent: 
To do… 
Use the command… 
Remarks 
Enter system view 
system-view 
— 
hwtacacs nas-ip ip-address 
Specify the source IP 
address for 
HWTACACS packets to 
be sent 
hwtacacs scheme 
hwtacacs-scheme-name 
nas-ip ip-address
 
Required 
Use either command. 
By default, there is no source IP 
address specified for HWTACACS 
packets and the IP address of the 
interface for sending the HWTACACS 
packets will be used as the source IP 
address of the HWTACACS packets. 
 
 
The  nas-ip command in HWTACACS scheme view is effective only for the current HWTACACS 
scheme, while that by the hwtacacs nas-ip command in system view is for all HWTACACS schemes. 
However, the setting in HWTACACS scheme view takes precedence over that in system view. 
 
Setting Timers Regarding HWTACACS Servers 
Follow these steps to set timers regarding HWTACACS servers: