Cisco SG500-52P Administration Guide

Security
Configuring TACACS+
Cisco 500 Series Stackable Managed Switch Administration Guide Release 1.3 370
20
Defaults
The following defaults are relevant to this feature:
• No default TACACS+ server is defined by default.
• If you configure a TACACS+ server, the accounting feature is disabled by
default.
Interactions With Other Features
You cannot enable accounting on both a RADIUS and TACACS+ server.
Workflow
To use a TACACS+ server, do the following:
STEP 1 Open an account for a user on the TACACS+ server.
STEP 2 Configure that server along with the other parameters in the TACACS+ and Add
TACAC S+ S er ve r p ages .
STEP 3 Select TACACS+ in the Management Access Authentication page, so that when a
user logs onto the device, authentication is performed on the TACACS+ server
instead of in the local database.
NOTE If more than one TACACS+ server has been configured, the device uses the
configured priorities of the available TACACS+ servers to select the TACACS+
server to be used by the device.
Configuring a TACACS+ Server
The TACACS+ page enables configuring TACACS+ servers.
Only users who have privilege level 15 on the TACACS+ server can administer the
device. Privilege level 15 is given to a user or group of users on the TACACS+
server by the following string in the user or group definition:
service = exec {
priv-lvl = 15
}
To configure TACACS+ server parameters:

Cisco SG500-52P Specifications

General

Model	SG500-52P
Ports	52
PoE Ports	48
PoE+	Yes
Switching Capacity	104 Gbps
Layer	Layer 3
Power over Ethernet (PoE)	Yes
Rack Mountable	Yes
VLAN Support	Yes
Manageable	Yes
Jumbo Frame Support	Yes
Power Supply	Internal
Dimensions	440 x 44 x 350 mm
MAC Address Table Size	16K entries
Operating Temperature	0°C to 50°C
Storage Temperature	-20 to 70°C (-4 to 158°F)
Relative Humidity	10% to 90%, non-condensing