Introduction Configuring a TACACS+ Server
Software Reference for SwitchBlade x3100 Series Switches (Access and Security)
6-90
ADD TACPLUS SERVER (SEC)
Syntax
ADD TACPLUS SERVER={ ipaddress-list | hostname-list } KEY=key [
PORT=1..65535 ] [ RETRIES=0..10 ] [ TIMEOUT=1..60 ] [ AUTHENTICA-
TION={ ON | OFF } ] [ AUTHORIZATION={ ON | OFF } ] [ ACCOUNTING={
ON | OFF } ]
Description Allows the user to set up a TACACS+ server to be used for user authentication pur-
poses. One or more IP addresses or hostnames plus a shared key are required parame-
ters.
Options The following table gives the range of values for each option that can be specified with
this command and a default value (if applicable).
Example
ADD TACPLUS SERVER=168.10.10.10
Option Description Default Value
KEY Specifies the key that is shared with the TACACS+
server for use in authentication requests. The secret
must be an alphanumeric string of 64 characters or less
in length.
PORT The TCP port number to which the TACACS+ requests
should be directed.
49
RETRIES Specifies the number of times a user authentication
request should be retried. Once the maximum number
of retries has been reached without a response from the
RADIUS server, the next RADIUS or TACACS+ server
or local database is consulted to determine the validity
of the authentication attempt.
3
TIMEOUT Used to specify the number of seconds to wait for a
response back from the RADIUS server. If no response
is received within the timeout period either the request
is retried if there are retries remaining, the next
RADIUS or TACACS+ server is contacted or authenti-
cation is attempted against the local user database.
5 seconds
AUTHENTI-
CATION
Whether the specified server will perform authentica-
tion
OFF
AUTHORI-
ZATION
Allows the user to turn the Authorization functionality
ON or OFF for the specified server.
OFF
ACCOUNT-
ING
Whether the specified server will perform accounting OFF
To Next Page
Loading...
Need help?
General
