Cisco 500 Series - Page 436

Security
Configuring TACACS+
Cisco 500 Series Stackable Managed Switch Administration Guide 434
21
The following information is sent to the TACACS+ server by the device when a
user logs in or out:
Defaults
The following defaults are relevant to this feature:
• No default TACACS+ server is defined by default.
• If you configure a TACACS+ server, the accounting feature is disabled by
default.
Interactions With Other Features
You cannot enable accounting on both a RADIUS and TACACS+ server.
Workflow
To use a TACACS+ server, do the following:
STEP 1 Open an account for a user on the TACACS+ server.
STEP 2 Configure that server along with the other parameters in the TACACS+ and Add
TACAC S+ S e r ver p ag e s.
Table 7 :
Argument Description In Start
Message
In Stop
Message
task_id A unique accounting session
identifier.
Ye s Ye s
user Username that is entered for
login authentication.
Ye s Ye s
rem-addr P address of the user. Yes Yes
elapsed-time Indicates how long the user was
logged in.
No Yes
reason Reports why the session was
terminated.
No Yes