Casa Systems C100G - TACACS+ and Access Control Lists; TACACS+ Configuration; Access Control Lists

11
Casa commands
ARRIS commands
configuring TACACS+
tacacs-server host 10.4.1.4
tacacs-server key
bl@hbl@hwh@t3v3r
aaa authentication login default
group tacacsplus
aaa authentication enable default
group tacacsplus enable
aaa authentication login
tacacsplus-local
aaa authorization command 0
default if-authenticated
aaa authorization command 15
default if-authenticated
aaa accounting
aaa accounting commands 0
default stop-only
aaa accounting commands 1
default stop-only
aaa accounting commands 15
default stop-only
aaa tacacs-source loopback 0
configure tacacs host 10.4.1.4 key
bl@hbl@hwh@t3v3r
Access Control Lists
create an access list to
restrict telnet
ip access-list restrict-telnet
remark “deny TELNET access to
class-srv2”
deny telnet 10.4.1.4
255.255.255.255 any
exit
configure access-list restrict-telnet deny
tcp 10.4.1.4 0.0.0.0 eq 23
configure access-list restrict-telnet
remark “deny TELNET access to class-
srv2”
apply the ACL to your
VLAN
interface vlan 200
ip access-group restrict-telnet
configure interface Ethernet
<slot>/<port> ip access-group restrict-
telnet in
remove the ACL
no ip access-group
configure interface Ethernet
<slot>/<port> no ip access-group restrict-
telnet in