HWTACACS

Context

HWTACACS prevents unauthorized users from attacking a network and supports command-line authorization. Compared with RADIUS, HWTACACS is more reliable in transmission and encryption, and is more suitable for security control.

Procedure

Enable or disable HWTACACS.
1. Choose Configuration > Security Services > AAA and click the HWTACACS tab.
2. Set the HWTACACS function status of ON or OFF.
3. Click Apply. In the dialog box that is displayed, click OK.

Configure an HWTACACS server profile.

Create an HWTACACS server profile.

Choose Configuration > Security Services > AAA and click the HWTACACS tab.

Click Create in HWTACACS Server Profile to open the Create HWTACACS server profile page.

Table 1 describes the parameters on the page.

**Table 1** Create HWTACACS server profile
Parameter	Description
Profile name	Indicates the name of an HWTACACS server profile.
key	Indicates the shared key for the HWTACACS server.
Confirm key	Indicates the confirmed shared key of the HWTACACS server.
User name	Indicates whether the device encapsulates the domain name in the user name when sending HWTACACS packets to an HWTACACS server. Original user name configures the device not to modify the user name entered by the user in the packets sent to the HWTACACS server.

Set parameters for the HWTACACS server.
Click OK.

Modify an HWTACACS server profile.
1. Choose Configuration > Security Services > AAA and click the HWTACACS tab.
2. Select a HWTACACS server profile in HWTACACS Server Profile to open the HWTACACS server profile modification page.
3. Modify parameters for the HWTACACS server. Table 1 describes the parameters for modifying an HWTACACS server profile.
4. Click OK.

Configure an authentication/authorization/accounting server.

Create an authentication/authorization/accounting server.

Choose Configuration > Security Services > AAA and click the HWTACACS tab.

Click Create in Authentication/Authorization/Accounting Server to open the Create Authentication/Authorization/Accounting Server page.

Table 2 describes the parameters on the page.

**Table 2** Parameters for creating an authentication/authorization/accounting server
Parameter	Description
Profile name	Indicates the name of the created HWTACACS server profile.
Server type	Indicates the HWTACACS server type: Authentication/Authorization/Accounting server.
Primary server IP address	Indicates the IP address of the primary authentication/authorization/accounting server.
Primary server port number	Indicates the port number of the primary authentication/authorization/accounting server.
Secondary server IP address	Indicates the IP address of the secondary authentication/authorization/accounting server.
Secondary server port number	Indicates the port number of the secondary authentication/authorization/accounting server.

Set parameters for the authentication/authorization/accounting server.
Click OK.

Modify an authentication/authorization/accounting server.
1. Choose Configuration > Security Services > AAA and click the HWTACACS tab.
2. Select the authentication/authorization/accounting server in Authentication/Authorization/Accounting Server.
3. Modify parameters for the authentication/authorization/accounting server. Table 2 describes the parameters for modifying an authentication/authorization/accounting server.
4. Click OK.