HWTACACS template status is not getting up at S5720

Thanks for contacting the Huawei community!

We are checking your question and will provide an answer to you shortly...

Hi AlSafy
Dou you check AAA configuration ?

https://support.huawei.com/enterprise/en/doc/EDOC1000178178/74e8248d/example-for-configuring-hwtacacs-authentication-accounting-and-authorization

Configure authentication, authorization, and accounting schemes.
# Create an authentication scheme named l-h. Configure the authentication scheme to use HWTACACS authentication as the active authentication mode and local authentication as the backup.

[Switch] aaa
[Switch-aaa] authentication-scheme l-h
[Switch-aaa-authen-l-h] authentication-mode hwtacacs local
[Switch-aaa-authen-l-h] quit
# Create an authorization scheme named hwtacacs. Configure the authorization scheme to use HWTACACS authorization as the active authorization mode and local authorization as the backup.

[Switch-aaa] authorization-scheme hwtacacs
[Switch-aaa-author-hwtacacs] authorization-mode hwtacacs local
[Switch-aaa-author-hwtacacs] quit
# Create an accounting scheme named hwtacacs, and configure the accounting scheme to use the HWTACACS accounting mode. Configure a policy for the device to keep users online upon accounting-start failures.

[Switch-aaa] accounting-scheme hwtacacs
[Switch-aaa-accounting-hwtacacs] accounting-mode hwtacacs
[Switch-aaa-accounting-hwtacacs] accounting start-fail online
# Set the real-time accounting interval to 3 minutes.

[Switch-aaa-accounting-hwtacacs] accounting realtime 3
[Switch-aaa-accounting-hwtacacs] quit
Create a domain named huawei, and apply the authentication scheme l-h, authorization scheme hwtacacs, accounting scheme hwtacacs, and the HWTACACS server template ht to the domain.
[Switch-aaa] domain huawei
[Switch-aaa-domain-huawei] authentication-scheme l-h
[Switch-aaa-domain-huawei] authorization-scheme hwtacacs
[Switch-aaa-domain-huawei] accounting-scheme hwtacacs
[Switch-aaa-domain-huawei] hwtacacs-server ht
[Switch-aaa-domain-huawei] quit
[Switch-aaa] quit
Configure local authentication.
[Switch] aaa
[Switch-aaa] local-user user1 password irreversible-cipher Huawei@123
[Switch-aaa] local-user user1 service-type http
[Switch-aaa] local-user user1 privilege level 15
[Switch-aaa] quit
Configure the global default domain for administrations.
[Switch] domain huawei admin

Dou you Print
[Switch] display domain name default_admin

all them normally see..
I will suggest version upgrade
What's the full model S5720?-??-???

S5700 V200R010C00SPC600

Valid

2017-02-22

Upgrade to -->> S5700 V200R019C10SPC500 2020-05-15

Download link --> https://support.huawei.com/enterprise/en/switches/s5720-32p-ei-ac-pid-22347229/software?offeringId=6691579

Upgrade Guide Link --> https://support.huawei.com/enterprise/en/doc/EDOC1000113883?idPath=24030814|21782164|21782167|22318564|6691579

Upgrade Video Link--> 

https://www.youtube.com/watch?v=ehDETOSw0wU

Hope it can help you.!

Does anyone has any other suggestion?? Except for version upgrade, any admin???@DDSN @Popeye_Wang, Is this version upgrade recommended??

Good answers

Hi,
First of all, since you configured the source IP, and I'm not sure whether the ping test you did specify the source IP address, if not, please retry specify the source address and do the ping test again.
If you have assigned the source address while doing the ping test, I would suggest that you do a telnet test on the switch (telnet the port 49) to check whether the HWTACACS service is enabled normally.
Besides that, you also need to check the HWTACACS server configuration, whether it blocks the IPs.
If all above are normal, please check the template verbose information through the command "display hwtacacs-server template verbose".