Cisco WS-C6506 - Page 956

39-22
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
OL-8978-04
Chapter 39 Configuring the Switch Access Using AAA
Configuring Authentication on the Switch
This example shows how to specify a TACACS+ key and verify the configuration:
Console> (enable) set tacacs key Secret_TACACS_key
The tacacs key has been set to Secret_TACACS_key.
Console> (enable) show tacacs
Tacacs key: Secret_TACACS_key
Tacacs login attempts: 3
Tacacs timeout: 5 seconds
Tacacs direct request: disabled
Tacacs-Server Status
---------------------------------------- -------
172.20.52.3
172.20.52.2 primary
172.20.52.10
Console> (enable)
Specifying the TACACS+ Timeout Interval
You can specify the timeout interval between retransmissions to the TACACS+ server. The default
timeout is 5 seconds.
To specify a TACACS+ timeout interval, perform this task in privileged mode:
This example shows how to specify the server timeout interval and verify the configuration:
Console> (enable) set tacacs timeout 30
Tacacs timeout set to 30 seconds.
Console> (enable) show tacacs
Tacacs key: Secret_TACACS_key
Tacacs login attempts: 3
Tacacs timeout: 30 seconds
Tacacs direct request: disabled
Tacacs-Server Status
---------------------------------------- -------
172.20.52.3
172.20.52.2 primary
172.20.52.10
Console> (enable)
Specifying the TACACS+ Login Attempts
You can specify the number of failed login attempts that are allowed.
To specify the number of login attempts that are allowed, perform this task in privileged mode:
Task Command
Step 1
Specify a TACACS+ timeout interval. set tacacs timeout seconds
Step 2
Verify the TACACS+ configuration. show tacacs
Task Command
Step 1
Specify the number of allowed login attempts. set tacacs attempts number
Step 2
Verify the TACACS+ configuration. show tacacs