Configuring a TACACS+ Server Introduction
6-95
Software Reference for SwitchBlade x3100 Series Switches (Access and Security)
SET TACPLUS SERVER (SEC)
Syntax
SET TACPLUS SERVER={ ipaddress-list | hostname-list | ALL } [
KEY=key ] [ PORT=1..65535 ] [ RETRIES=0..10 ] [ TIMEOUT=1..60 ] [
AUTHENTICATION={ ON | OFF } ] [ AUTHORIZATION={ ON | OFF } ] [
ACCOUNTING={ ON | OFF } ]
Description Allows the user to change the settings of one or more existing configured TACACS+
servers.
Options The following table gives the range of values for each option that can be specified with
this command and a default value (if applicable).
Example
SET TACPLUS SERVER=168.10.10.10 AUTHORIZATION=ON ACCOUNTING=ON
Option Description Default Value
KEY Specifies the key that is shared with the TACACS+
server for use in authentication requests. The secret
must be an alphanumeric string of 64 characters or less
in length.
PORT The TCP port number to which the TACACS+ requests
should be directed.
49
RETRIES Specifies the number of times a user authentication
request should be retried. Once the maximum number
of retries has been reached without a response from the
RADIUS server, the next RADIUS or TACACS+ server
or local database is consulted to determine the validity
of the authentication attempt.
3
TIMEOUT Used to specify the number of seconds to wait for a
response back from the RADIUS server. If no response
is received within the timeout period either the request
is retried if there are retries remaining, the next
RADIUS or TACACS+ server is contacted or authenti-
cation is attempted against the local user database.
5 seconds
AUTHENTI-
CATION
Whether the specified server will perform authentica-
tion
OFF
AUTHORI-
ZATION
Allows the user to turn the Authorization functionality
ON or OFF for the specified server.
OFF
ACCOUNT-
ING
Whether the specified server will perform accounting OFF