1-30Configuring HWTACACSDifferent from RADIUS, except for deleting HWTACACS schemes and changing the IP addresses ofthe HWTACACS servers, you can make any changes to HWTACACS parameters, no matter whetherthere are users online or not.Creating an HWTACACS schemeThe HWTACACS protocol is configured on a per scheme basis. Before performing other HWTACACSconfigurations, follow these steps to create an HWTACACS scheme and enter HWTACACS schemeview:To do… Use the command… RemarksEnter system view system-view —Create an HWTACACSscheme and enter HWTACACSscheme viewhwtacacs schemehwtacacs-scheme-nameRequiredNot defined by defaultz Up to 16 HWTACACS schemes can be configured.z A scheme can be deleted only when it is not referenced.Specifying the HWTACACS Authentication ServersFollow these steps to specify the HWTACACS authentication servers:To do… Use the command… RemarksEnter system view system-view —Enter HWTACACS schemeviewhwtacacs schemehwtacacs-scheme-name —Specify the primaryHWTACACS authenticationserverprimary authenticationip-address [ port-number ]Specify the secondaryHWTACACS authenticationserversecondary authenticationip-address [ port-number ]RequiredConfigure at least one of thecommandsNo authentication server bydefault
