Command Reference Guide

278 ● secondary authorization 3Com Router 5000 Family and Router 6000 Family
Command Reference
secondary authorization
Purpose Use the secondary authorization command to configure a secondary TACACS
authorization server.
Use the .undo secondary authorization command to delete the configured
secondary authorization server.
Syntax secondary authorization ip-address [ port ]
undo secondary authorization
Parameters ip-address
IP address of the server, a legal unicast address in
dotted decimal format.
port
Port number of the server. Valid values are 1 to 65535.
If no value is specifed, the default is 49.
Default By default, IP address of TACACS authorization server is all zeros.
Example Configure the secondary authorization server.
[3Com] hwtacacs scheme test1
[3Com-hwtacacs-test1] secondary authorization 10.163.155.13 49
View This command can be used in the following views:
■ HWTACACS view
Description You are not allowed to assign the same IP address to both primary and secondary
authorization servers.
You can configure only one primary authorization server in a HWTACACS scheme. If
you repeatedly use this command, the latest configuration replaces the previous one.
You can remove an authorization server only when it is not being used by any active
TCP connections, and the removal impacts only packets forwarded afterwards.
Related Command display hwatacs