Operation Manual – AAAH3C S5600 Series Ethernet Switches Chapter 2 AAA Configuration2-28To do… Use the command… RemarksSet the IP address andport number of theprimary TACACSauthorization serverprimary authorizationip-address [ port ]RequiredBy default, the IP addressof the primaryauthorization server is0.0.0.0, and the portnumber is 0.Set the IP address andport number of thesecondary TACACSauthorization serversecondary authorizationip-address [ port ]OptionalBy default, the IP addressof the secondaryauthorization server is0.0.0.0, and the portnumber is 0.Caution:z You are not allowed to configure the same IP address for both primary andsecondary authorization servers. If you do this, the system will prompt that theconfiguration fails.z You can remove a server only when it is not used by any active TCP connection forsending authorization messages.2.3.4 Configuring TACACS Accounting ServersFollow these steps to configure TACACS accounting servers:To do… Use the command… RemarksEnter system view system-view —Create a HWTACACSscheme and enter its viewhwtacacs schemehwtacacs-scheme-nameRequiredBy default, noHWTACACS schemeexists.Set the IP address andport number of theprimary TACACSaccounting serverprimary accountingip-address [ port ]RequiredBy default, the IP addressof the primary accountingserver is 0.0.0.0, and theport number is 0.Set the IP address andport number of thesecondary TACACSaccounting serversecondary accountingip-address [ port ]RequiredBy default, the IP addressof the secondaryaccounting server is0.0.0.0, and the portnumber is 0.
