2-25Operation Command RemarksSet the IP address and portnumber of the primary TACACSauthentication serverprimary authenticationip-address [ port ]RequiredBy default, the IP address of theprimary authentication server is0.0.0.0, and the port number is0.Set the IP address and portnumber of the secondaryTACACS authentication serversecondary authenticationip-address [ port ]OptionalBy default, the IP address of thesecondary authenticationserver is 0.0.0.0, and the portnumber is 0.z You are not allowed to configure the same IP address for both primary and secondaryauthentication servers. If you do this, the system will prompt that the configuration fails.z You can remove an authentication server setting only when there is no active TCP connection thatis sending authentication messages to the server.Configuring TACACS Authorization ServersTable 2-27 Configure TACACS authorization serversOperation Command RemarksEnter system view system-view —Create a HWTACACS schemeand enter its viewhwtacacs schemehwtacacs-scheme-nameRequiredBy default, no HWTACACSscheme exists.Set the IP address and portnumber of the primary TACACSauthorization serverprimary authorizationip-address [ port ]RequiredBy default, the IP address of theprimary authorization server is0.0.0.0, and the port number is 0.Set the IP address and portnumber of the secondaryTACACS authorization serversecondary authorizationip-address [ port ]OptionalBy default, the IP address of thesecondary authorization server is0.0.0.0, and the port number is 0.z You are not allowed to configure the same IP address for both primary and secondary authorizationservers. If you do this, the system will prompt that the configuration fails.z You can remove a server only when it is not used by any active TCP connection for sendingauthorization messages.
