What are limitations on configuring HWTACACS on an AR

9

On the AR, there are the following constraints for HWTACACS authentication configuration:
- The HWTACACS server template that are in use, bound to domains, or referenced by accounting-stop packets cannot be deleted.
- If the TACACS server is sending packets, the server's IP address cannot be changed.

Other related questions:
Why does HWTACACS authentication fail when the HWTACACS configuration is correct
The HWTACACS server template configuration of the AR is correct. In AAA mode, the HWTACACS authentication configuration and configuration of the remote TACACS server are correct. The possible causes for HWTACACS authentication failures are as follows: - The client's IP address is not configured on the TACACS server, so the TACACS server does not send authentication packets. - Different shared keys are configured on the AR and TACACS server.

What are the restrictions on using HWTACACS
The HWTACACS template used by users, bound to domains, or referenced by accounting stop packets cannot be deleted. If the HWTACACS server is sending packets, the server IP address cannot be changed.

Why does HWTACACS authentication fail when the HWTACACS server template and HWTACACS server are properly configured
This failure has the following possible causes: -The IP address of the router (a client) is not configured on the HWTACACS server, so the HWTACACS server cannot send an authentication response packet to the router . -Different shared keys are configured on the router and the HWTACACS server.

How to configure bandwidth limiting on an AR?
Traffic shaping, traffic policing, and interface-based rate limiting can be configured to limit bandwidth. 1. Configuration commands: The qos gts command configures traffic shaping. The qos car command configures traffic policing. The qos lr command configures interface bandwidth. 2. Log in to the web system, choose QoS > Traffic Management > Policy Parameter Configuration, and set parameters.

Units of CAR parameters
The CIR and PIR are expressed in kbit/s, and the CBS and PBS are expressed in bytes.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top