2-26z You are not allowed to configure the same IP address for both primary and secondary accountingservers. If you do this, the system will prompt that the configuration fails.z You can remove a server only when it is not used by any active TCP connection for sendingaccounting messages.Configuring Shared Keys for HWTACACS MessagesWhen using a TACACS server as an AAA server, you can set a key to improve the communicationsecurity between the switch and the TACACS server.The TACACS client and server adopt MD5 algorithm to encrypt HWTACACS messages before they areexchanged between the two parties. The two parties verify the validity of the HWTACACS messagesreceived from each other by using the shared keys that have been set on them, and can accept andrespond to the messages only when both parties have the same shared key.Follow these steps to configure shared keys for HWTACACS messages:To do… Use the command… RemarksEnter system view system-view —Create a HWTACACS scheme andenter its viewhwtacacs schemehwtacacs-scheme-nameRequiredBy default, no HWTACACSscheme exists.Set a shared key for HWTACACSauthentication, authorization oraccounting messageskey { accounting |authorization | authentication }stringRequiredBy default, no such key is set.Configuring the Attributes of Data to be Sent to TACACS ServersFollow these steps to configure the attributes for data to be sent to TACACS servers:To do… Use the command… RemarksEnter system view system-view —Create a HWTACACS schemeand enter its viewhwtacacs schemehwtacacs-scheme-nameRequiredBy default, no HWTACACSscheme exists.Set the format of the usernamesto be sent to TACACS serveruser-name-format { with-domain |without-domain }OptionalBy default, the usernames sentfrom the switch to TACACS servercarry ISP domain names.data-flow-format data { byte |giga-byte | kilo-byte | mega-byte }Set the units of data flows toTACACS servers data-flow-format packet{ giga-packet | kilo-packet |mega-packet | one-packet }OptionalBy default, in a TACACS scheme,the data unit and packet unit foroutgoing HWTACACS flows arebyte and one-packet respectively.
