51• It is recommended to specify only the primary HWTACACS authentication server if backup is notrequired.• If both the primary and secondary authentication servers are specified, the secondary one is used whenthe primary one is not reachable.• The IP addresses of the primary and secondary authentication servers cannot be the same. Otherwise,the configuration fails.• You can remove an authentication server only when no active TCP connection for sending authenticationpackets is using it.Specifying the HWTACACS authorization serversFollow these steps to specify the HWTACACS authorization servers:To do… Use the command… Remarks1. Enter system view system-view —2. Enter HWTACACS schemeviewhwtacacs scheme hwtacacs-scheme-name —3. Specify the primaryHWTACACS authorizationserverprimary authorization ip-address [ port-number | vpn-instance vpn-instance-name ] *RequiredConfigure at least one of thecommandsNo authorization server by default4. Specify the secondaryHWTACACS authorizationserversecondary authorization ip-address [ port-number | vpn-instance vpn-instance-name ] *• It is recommended to specify only the primary HWTACACS authorization server if backup is not required.• If both the primary and secondary authorization servers are specified, the secondary one is used whenthe primary one is not reachable.• The IP addresses of the primary and secondary authorization servers cannot be the same. Otherwise, theconfiguration fails.• You can remove an authorization server only when no active TCP connection for sending authorizationpackets is using it.Specifying the HWTACACS accounting serversFollow these steps to specify the HWTACACS accounting servers and perform relatedconfigurations:To do… Use the command… Remarks1. Enter system view system-view —2. Enter HWTACACS schemeviewhwtacacs scheme hwtacacs-scheme-name —
