Operation Manual – AAAH3C S5600 Series Ethernet Switches Chapter 2 AAA Configuration2-302.3.6 Configuring the Attributes of Data to be Sent to TACACS ServersFollow these steps to configure the attributes for data to be sent to TACACS servers:To do… Use the command… RemarksEnter system view system-view —Create a HWTACACSscheme and enter its viewhwtacacs schemehwtacacs-scheme-nameRequiredBy default, noHWTACACS schemeexists.Set the format of theusernames to be sent toTACACS serveruser-name-format{ with-domain |without-domain }OptionalBy default, the usernamessent from the switch toTACACS server carry ISPdomain names.data-flow-format data{ byte | giga-byte |kilo-byte | mega-byte }Set the units of data flowsto TACACS servers data-flow-format packet{ giga-packet |kilo-packet |mega-packet |one-packet }OptionalBy default, in a TACACSscheme, the data unit andpacket unit for outgoingHWTACACS flows arebyte and one-packetrespectively.HWTACACS schemeviewnas-ip ip-addressSet the source IP addressof outgoing HWTACACSmessages System viewhwtacacs nas-ipip-addressOptionalBy default, no source IPaddress is set; the IPaddress of thecorresponding outboundinterface is used as thesource IP address.Caution:Generally, the access users are named in the userid@isp-name or userid.isp-nameformat. Where, isp-name after the “@” or “.” character represents the ISP domain name.If the TACACS server does not accept the usernames that carry ISP domain names, itis necessary to remove domain names from usernames before they are sent toTACACS server.2.3.7 Configuring the Timers Regarding TACACS ServersFollow these steps to configure the timers regarding TACACS servers:
