Command Reference Guide

3Com Router 5000 Family and Router 6000 Family secondary authentication ● 277
Command Reference
secondary authentication
Purpose Use the secondary authentication command to configure a secondary
TACACS authentication server.
Use the undo secondary authentication command to delete the configured
secondary authentication server.
Syntax secondary authentication ip-address [ port ]
undo secondary authentication
Parameters ip-address
IP address of the server, a valid unicast address in
dotted decimal format.
port
Port number of the server. Valid values are 1 to 65535.
If no value is specified, the default is 49.
Default By default, IP address of TACACS authentication server is all zeros.
Example Configure a secondary authentication server.
[3Com] hwtacacs scheme test1
[3Com-hwtacacs-test1] secondary authentication 10.163.155.13 49
View This command can be used in the following views:
■ HWTACACS view
Description You are not allowed to assign the same IP address to both primary and secondary
authentication servers.
You can configure only one primary authentication server in a HWTACACS scheme. If
you repeatedly use this command, the latest configuration replaces the previous one.
You can remove an authentication server only when it is not being used by any active
TCP connections, and the removal impacts only packets forwarded afterwards.
Related Command display hwatacs