HWTACACS

Context

HWTACACS prevents unauthorized users from attacking a network and supports command-line authorization. Compared with RADIUS, HWTACACS is more reliable in transmission and encryption, and is more suitable for security control.

Procedure

Enable or disable HWTACACS.
1. Choose Configuration > Security Services > AAA and click the HWTACACS tab.
2. Set the HWTACACS function status to ON or OFF.
3. Click Apply. In the dialog box that is displayed, click OK.

Configure an HWTACACS server profile.

Create an HWTACACS server profile.

Choose Configuration > Security Services > AAA and click the HWTACACS tab.

Click Create in HWTACACS Server Profile to open the Create HWTACACS server profile page.

Table 1 describes the parameters on the page.

**Table 1** Parameters for creating an HWTACACS server profile
Parameter	Description
Profile name	Name of an HWTACACS server profile.
Key	Shared key for the HWTACACS server.
User name	Whether the device encapsulates the domain name in the user name when sending HWTACACS packets to an HWTACACS server.
Source address of outgoing packets	Source IP address used by a device to communicate with an HWTACACS server.

Set parameters for the HWTACACS server.
Click OK.

Modify an HWTACACS server profile.
1. Choose Configuration > Security Services > AAA and click the HWTACACS tab.
2. Select an HWTACACS server profile in HWTACACS Server Profile to open the HWTACACS server profile modification page.
3. Modify parameters for the HWTACACS server. Table 1 describes the parameters for modifying an HWTACACS server profile.
4. Click OK.

Configure an Authentication/Authorization/Accounting server.

Create an Authentication/Accounting server.

Choose Configuration > Security Services > AAA and click the HWTACACS tab.

Click Create in Authentication/Authorization/Accounting Server to open the Create Authentication/Authorization/Accounting Server page.

Table 2 describes the parameters on the page.

**Table 2** Parameters for creating an Authentication/Authorization/Accounting server
Parameter	Description
Profile name	Name of an HWTACACS server profile.
Server type	Server type, which can be an authentication, authorization, or accounting server.
Primary server IP address	IP address of the primary server.
Primary server port number	Port number of the primary server.
Secondary server IP address	IP address of the secondary server.
Secondary server port number	Port number of the secondary server.

Set parameters for the Authentication/Authorization/Accounting server.
Click OK.

Modify an Authentication/Authorization/Accounting server.
1. Choose Configuration > Security Services > AAA and click the HWTACACS tab.
2. Click the profile to modify in Authentication/Authorization/Accounting Server. The page for modifying an Authentication/Authorization/Accounting server is displayed.
3. Modify parameters of the Authentication/Authorization/Accounting server. For description of the parameters, see Table 2.
4. Click OK.