5-10
Cisco SCE8000 Software Configuration Guide, Rel 3.1.6S
OL-16479-01
Chapter 5 Configuring the Management Interface and Security
Configuring the Available Interfaces
Configuring the SCE Platform TACACS+ Client
The user must configure the remote servers for the TACACS+ protocol. Then the SCE platform
TACACS+ client must be configured to work with the TACACS+ servers. The following information
must be configured:
• TACACS+ server hosts definition — a maximum of three servers is supported.
For each sever host, the following information can be configured:
–
hostname (required)
–
port
–
encryption key
–
timeout interval
• Default encryption key (optional) — A global default encryption key may be defined. This key is
defined as the key for any server host for which a key is not explicitly configured when the server
host is defined.
If the default encryption key is not configured, a default of no key is assigned to any server for which
a key is not explicitly configured.
• Default timeout interval (optional) — A global default timeout interval may be defined. This timeout
interval is defined as the timeout interval for any server host for which a timeout interval is not
explicitly configured when the server host is defined.
If the default timeout interval is not configured, a default of five seconds is assigned to any server
for which a timeout interval is not explicitly configured.
The procedures for configuring the SCE platform TACACS+ client are explained in the following
sections:
• How to Add a New TACACS+ Server Host, page 5-10
• How to Remove a TACACS+ Server Host, page 5-11
• How to Configure the Global Default Key, page 5-11
• How to Configure the Global Default Timeout, page 5-12
How to Add a New TACACS+ Server Host
Use this command to define a new TACACS+ server host that is available to the SCE platform TACACS+
client.
The Service Control solution supports a maximum of three TACACS+ server hosts.
Options
The following options are available:
• host-name — name of the server
• port number — TACACS+ port number
–
Default = 49
• timeout interval — time in seconds that the server waits for a reply from the server host before
timing out
–
Default = 5 seconds or user-configured global default timeout interval (See How to Define the
Global Default Timeout, page 5-12.)
To Next Page
Loading...
