TACACS+ Server Managing Authentication Servers
page 25-16 OmniSwitch 6800/6850/9000 Network Configuration Guide March 2008
Configuring the TACACS+ Client
Use the aaa tacacs+-server command to configure TACACS+ parameters on the switch.
When creating a new server, at least one host name or IP address (specified by the host keyword) is
required as well as the shared secret (specified by the key keyword).
In this example, the server name is tac1, the host address is 10.10.5.2, the backup address is 10.10.5.5, and
the shared secret is otna. Note that the shared secret must be configured exactly the same as on the server.
-> aaa tacacs+-server tac1 host 10.10.5.2 10.10.5.5 key otna
To modify a TACACS+ server, enter the server name and the desired parameter to be modified.
-> aaa tacacs+-server tac1 key tnemelc
If you are modifying the server and have just entered the aaa tacacs+-server command to create or
modify the server, you can use command prefix recognition. For example:
-> aaa tacacs+-server tac1 timeout 5
For information about server defaults, see “Server Defaults” on page 25-3.
To remove a TACACS+ server, use the no form of the command:
-> no aaa tacacs+-server tac1
Note that only one server may be deleted at a time.
TACACS+ server keywords
key
host
timeout
port
To Next Page
Loading...
