No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


Fat AP and Cloud AP V200R010C00 Command Reference

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
hwtacacs-server authentication

hwtacacs-server authentication


The hwtacacs-server authentication command configures the HWTACACS authentication server.

The undo hwtacacs-server authentication command deletes configurations of the HWTACACS authentication server.

By default, no HWTACACS authentication server is configured.


hwtacacs-server authentication ip-address [ port ] [ public-net ] [ secondary | third ]

undo hwtacacs-server authentication [ secondary | third ]






Specifies the IP address of an HWTACACS authentication server.

The value is a valid unicast address in dotted decimal notation.


Specifies the port number of an HWTACACS authentication server.

The value is an integer that ranges from 1 to 65535. The default value is 49.


Indicates that the HWTACACS authentication server is connected to the public network.



Configures the second HWTACACS authentication server as the standby server. If no standby server is configured, the primary HWTACACS authentication server is specified.



Configures the third HWTACACS authentication server as the standby server. If no secondary server is configured, the primary HWTACACS authentication server is specified.



HWTACACS server template view

Default Level

3: Management level

Usage Guidelines

Usage Scenario

To authenticate users in HWTACACS mode, you must configure the HWTACACS authentication server. When both the primary and secondary authentication servers are configured, the device sends an authentication request packet to the secondary authentication server in any of the following situations:

  • The device fails to send a request packet to the primary authentication server.
  • If the device does not receive any authentication response packet from the primary server:
  • The primary authentication server requires re-authentication.
  • The primary authentication server considers that the received authentication request packet is incorrect.


  • You can modify this configuration only when device does not set up TCP connection with the specified accounting server.

  • The IP addresses of the primary and secondary servers must be different. Otherwise, the server configuration fails.

  • If the command is run for multiple times in the same HWTACACS server template to configure the servers with the same type (for example, the servers are all primary servers), only the latest configuration takes effect.


# Configure the primary HWTACACS authentication server.

<Huawei> system-view
[Huawei] hwtacacs-server template test1
[Huawei-hwtacacs-test1] hwtacacs-server authentication 49
Updated: 2019-11-21

Document ID: EDOC1100064352

Views: 207928

Downloads: 122

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Previous Next