Managing Authentication Servers TACACS+ Server
OmniSwitch AOS Release 8 Network Configuration Guide December 2017 page 31-14
Configuring the TACACS+ Client
Use the aaa tacacs+-server command to configure TACACS+ parameters on the switch.
When creating a new server, at least one host name or IP address (specified by the host keyword) is
required as well as the shared secret (specified by the key keyword).
In this example, the server name is tac1, the host address is 10.10.5.2, the backup address is 10.10.5.5, and
the shared secret is otna. Note that the shared secret must be configured exactly the same as on the server.
-> aaa tacacs+-server tac1 host 10.10.5.2 10.10.5.5 key otna
An option prompt-key is provided, which can be used to enter the secret key in a obscured format rather
than as clear text. When this option is selected, press the Enter key. A password prompt appears prompt-
ing to enter the secret key. Secret key needs to be re-entered, and only if both the entries match, command
is accepted. Key provided in this mode is not displayed on the CLI as text.
For example,
-> aaa tacacs+-server tac1 prompt-key host 10.10.2.2
Enter Key: *******
Confirm Key: *******
To modify a TACACS+ server, enter the server name and the desired parameter to be modified.
-> aaa tacacs+-server tac1 key tnemelc
If you are modifying the server and have just entered the aaa tacacs+-server command to create or
modify the server, you can use command prefix recognition. For example:
-> aaa tacacs+-server tac1 timeout 5
For information about server defaults, see “Server Defaults” on page 31-2.
To remove a TACACS+ server, use the no form of the command:
-> no aaa tacacs+-server tac1
Note that only one server can be deleted at a time.
TACACS+ server keywords
key
host
timeout
port
To Next Page
Loading...
