2-25To do… Use the command… RemarksCreate a HWTACACS scheme andenter its viewhwtacacs schemehwtacacs-scheme-nameRequiredBy default, no HWTACACS schemeexists.Set the IP address and portnumber of the primary TACACSauthorization serverprimary authorizationip-address [ port ]RequiredBy default, the IP address of theprimary authorization server is0.0.0.0, and the port number is 0.Set the IP address and portnumber of the secondary TACACSauthorization serversecondary authorizationip-address [ port ]OptionalBy default, the IP address of thesecondary authorization server is0.0.0.0, and the port number is 0.z You are not allowed to configure the same IP address for both primary and secondaryauthorization servers. If you do this, the system will prompt that the configuration fails.z You can remove a server only when it is not used by any active TCP connection for sendingauthorization messages.Configuring TACACS Accounting ServersFollow these steps to configure TACACS accounting servers:To do… Use the command… RemarksEnter system view system-view —Create a HWTACACS scheme andenter its viewhwtacacs schemehwtacacs-scheme-nameRequiredBy default, no HWTACACSscheme exists.Set the IP address and portnumber of the primary TACACSaccounting serverprimary accounting ip-address[ port ]RequiredBy default, the IP address of theprimary accounting server is0.0.0.0, and the port number is 0.Set the IP address and portnumber of the secondary TACACSaccounting serversecondary accountingip-address [ port ]RequiredBy default, the IP address of thesecondary accounting server is0.0.0.0, and the port number is 0.Enable the stop-accountingmessage retransmission functionand set the maximum number oftransmission attempts of a bufferedstop-accounting messageretry stop-accounting retry-timesOptionalBy default, the stop-accountingmessages retransmission functionis enabled and the system cantransmit a bufferedstop-accounting request for 100times.
