server-ip (Kerberos snooping profile view)

Function

The server-ip command configures the IP address of a Kerberos server.

The undo server-ip command deletes the configuration of the Kerberos server IP address.

By default, no Kerberos server IP address is configured on the device.

Format

server-ip server-ip-address &<1-10>

undo server-ip { server-ip-address | all }

Parameters

Parameter	Description	Value
server-ip-address	Specifies the IP address of a Kerberos server.	The value is in dotted decimal format.
all	Deletes all Kerberos server IP addresses.	-

Views

Kerberos snooping profile view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When configuring Kerberos snooping, you need to run the server-ip command to configure the IP address of a Kerberos server. The device identifies the Kerberos packets sent by a Kerberos server based on the configured IP address and port number of the Kerberos server. If the device receives a KRB_AS_REP, KRB_TGS_REP, or KRB_AP_REP packet from the Kerberos server, it considers that the user has been authenticated and allows the user to access network resources.

Precautions

Ensure that the IP address configured on the device is the same as that used by the Kerberos server.

Example

# Configure the Kerberos server IP address 10.1.1.1 on the device.

<HUAWEI> system-view
[HUAWEI] kerberos-snooping-profile name profile1
[HUAWEI-krb-snooping-profile-profile1] server-ip 10.1.1.1