Command Manual (For Soliton) – AAA
H3C S3100 Series Ethernet Switches
Chapter 1 AAA Configuration Commands
1-73
1.3.9 primary authentication
Syntax
primary authentication
ip-address
[
port
]
undo primary authentication
View
HWTACACS scheme view
Parameters
ip-address
: IP address of the primary authentication server to be used, a valid unicast
address in dotted decimal notation.
port
: Port number of the primary authentication server, ranging from 1 to 65535.
Description
Use the
primary authentication
command to set the IP address and port number of
the primary HWTACACS authentication server to be used by the current scheme.
Use the
undo primary authentication
command to restore the default IP address and
port number of the primary HWTACACS authentication server, which are 0.0.0.0 and
49 respectively.
Note that:
z
You are not allowed to set the same IP address for both primary and secondary
authentication servers. If you do this, your setting will fail.
z
If you re-execute the command, the new setting will overwrite the old one.
z
You can remove an authentication server setting only when there is no active TCP
connection that is sending authentication messages to the server.
Related commands:
display hwtacacs
.
Examples
# Set the IP address and UDP port number of the primary authentication server for
HWTACACS scheme hwt1 to 10.163.155.13 and 49 respectively.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] hwtacacs scheme hwt1
[Sysname-hwtacacs-hwt1] primary authentication 10.163.155.13 49
1.3.10 primary authorization
Syntax
primary authorization ip-address
[
port
]
