Operation Manual – AAA & RADIUS & HWTACACS & EADH3C S7500 Series Ethernet SwitchesChapter 1 AAA & RADIUS & HWTACACSConfiguration1-371.5.6 Configuring the Attributes for Data to be Sent to TACACS ServersTable 1-28 Configure the attributes for data to be sent to TACACS serversTo do... Use the command... RemarksEnter system view system-view —Create a HWTACACSscheme and enter its viewhwtacacs schemehwtacacs-scheme-nameRequiredBy default, noHWTACACS schemeexists.Set the format of the usernames to be sent toTACACS serversuser-name-format{ with-domain |without-domain }OptionalBy default, the usernames sent from theswitch to TACACSservers carry ISP domainnames.data-flow-format data{ byte | giga-byte |kilo-byte | mega-byte }Set the units of measurefor data flows sent toTACACS serversdata-flow-format packet{ giga-packet |kilo-packet |mega-packet |one-packet }OptionalBy default, in a TACACSscheme, the unit ofmeasure for data is byteand that for packets isone-packet.HWTACACS viewnas-ip ip-addressSet the source IP addressused by the switch to sendHWTACACS packets System viewhwtacacs nas-ipip-addressOptionalBy default, no source IPaddress is specified; theIP address of theoutbound interface isused as the source IPaddress.Caution:Generally, the access users are named in the userid@isp-name format. isp-namebehind the @ character represents the ISP domain name. If the TACACS server doesnot accept the user name carrying ISP domain name, it is necessary to remove thedomain name from the user names before they are sent to the TACACS server.
