Added in version 1.8
Manage hwtacacs scheme
| parameter | required | default | choices | comments |
|---|---|---|---|---|
| hwtacacs_scheme_name | yes | hwtacacs scheme name | ||
| priority | no |
|
Specify the primary or secondary HWTACACS server | |
| auth_host_name | no | Specify the primary HWTACACS authentication server name | ||
| auth_host_ip | no | authentication ip address | ||
| auth_host_port | no | '49' | port number, 49 by default | |
| author_host_name | no | '49' | Specify the primary HWTACACS authorization server name | |
| author_host_ip | no | authorization ip address | ||
| author_host_port | no | '49' | port number, 49 by default | |
| acct_host_name | no | Specify the primary HWTACACS accounting server name | ||
| acct_host_ip | no | accounting ip address | ||
| acct_host_port | no | '49' | port number, 49 by default | |
| state | no | present |
|
Desired state for the interface configuration |
| hostname | yes | IP Address or hostname of the Comware v7 device that has NETCONF enabled | ||
| username | yes | Username used to login to the switch | ||
| password | yes | Password used to login to the switch | ||
| port | no | 830 | The Comware port used to connect to the switch | |
| look_for_keys | no | False | Whether searching for discoverable private key files in ~/.ssh/ |
# config hwtacacs scheme
- comware_hwtacacs: hwtacacs_scheme_name=test priority=primary auth_host_ip=192.168.1.186 auth_host_port=48 username={{ username }} password={{ password }} hostname={{ inventory_hostname }}
Note
authentication host name can not set together with authentication ipauthorization host name can not set together with authorization ipaccounting host name can not set together with accounting ip