532 CHAPTER 49: AAA & RADIUS & HWTACACS CONFIGURATIONthe information contained in this packet (NAS-ID, NAS-IP address and session ID),and ends the accounting of the users based on the last accounting update packet.4 Once the switch receives the response from the CAMS, it stops sending otherAccounting-On packets.5 If the switch does not receives any response from the CAMS after the number ofthe Accounting-On packets it has sent reaches the configured maximum number,it does not send any more Accounting-On packets.n The switch can automatically generate the main attributes (NAS-ID, NAS-IPaddress and session ID) in the Accounting-On packets. However, you can alsomanually configure the NAS-IP address with the nas-ip command. If you chooseto manually configure the attribute, be sure to configure an appropriate and legalIP address. If this attribute is not configured, the switch will automatically use theIP address of the VLAN interface as the NAS-IP address.HWTACACSConfigurationCreating a HWTACACSSchemeHWTACACS protocol is configured scheme by scheme. Therefore, you must createa HWTACACS scheme and enter HWTACACS view before you perform otherconfiguration tasks.c CAUTION: The system supports up to 16 HWTACACS schemes. You can onlydelete the schemes that are not being used.Configuring HWTACACSAuthentication ServersTable 417 Enable the user re-authentication upon device restart functionOperation Command DescriptionEnter system view system-view -Enter RADIUS schemeviewradius schemeradius-scheme-name-Enable the userre-authentication upondevice restart functionaccounting-on enable[ send times | intervalinterval ]By default, this function is disabled,and the system can send at most 15Accounting-On packets consecutivelyat intervals of three seconds.Table 418 Create a HWTACACS schemeOperation Command DescriptionEnter system view system-view -Create a HWTACACSscheme and enterHWTACACS viewhwtacacs schemehwtacacs-scheme-nameRequiredBy default, no HWTACACSscheme exists.Table 419 Configure HWTACACS authentication serversOperation Command DescriptionEnter system view system-view -Create a HWTACACSscheme and enter its viewhwtacacs schemehwtacacs-scheme-nameRequiredBy default, no HWTACACSscheme exists.
