3com 8807 참조 가이드
364
C
HAPTER
21: AAA
AND
RADIUS/HWTACACS P
ROTOCOL
C
ONFIGURATION
C
OMMANDS
secondary authorization
Syntax
secondary authorization ip-address [ port-number ]
undo secondary authorization
View
HWTACACS view
Parameter
ip-address: IP address of the server, a legal unicast address in dotted decimal
format.
format.
port-number: Port number of the server, ranging from 1 to 65535. By default, it is
49.
49.
Description
Use the secondary authorization command to configure a secondary TACACS
authorization server.
authorization server.
Use the .undo secondary authorization command to delete the configured
secondary authorization server.
secondary authorization server.
By default, IP address of TACACS authorization server is all zeros.
You are not allowed to assign the same IP address to both primary and secondary
authorization servers.
authorization servers.
If you repeatedly use this command, the latest configuration overwrites the
previous one.
previous one.
You can remove a TACACS scheme authorization server only when no Active TCP
connection used to send authorization packets is now using the server, and the
removal impacts only packets forwarded afterwards.
connection used to send authorization packets is now using the server, and the
removal impacts only packets forwarded afterwards.
Related command: display hwtacacs.
Example
# Configure the secondary authorization server.
[SW8800] hwtacacs scheme test1
[3Com-hwtacacs-test1] secondary authorization 10.163.155.13 49
timer quiet
Syntax
timer quiet minutes
undo timer quiet
View
HWTACACS view