Dell Force10 S4810P - Page 894

894 | Security
www.dell.com | support.dell.com
To select TACACS as the login authentication method, use these commands in the following sequence in
the CONFIGURATION mode:
To view the configuration, use the
show config in the LINE mode or the show running-config tacacs+
command in the EXEC Privilege mode.
If authentication fails using the primary method, FTOS employs the second method (or third method, if
necessary) automatically. For example, if the TACACS+ server is reachable, but the server key is invalid,
FTOS proceeds to the next authentication method. In Figure 43-4, the TACACS+ is incorrect, but the user
is still authenticated by the secondary method.
Step Command Syntax Command Mode Purpose
1
tacacs-server host {ip-address | host} CONFIGURATION Configure a TACACS+ server host. Enter
the IP address or host name of the
TACACS+ server.
Use this command multiple times to
configure multiple TACACS+ server hosts.
2
aaa authentication login {method-list-name
| default} tacacs+ [...method3]
CONFIGURATION Enter a text string (up to 16 characters
long) as the name of the method list you
wish to use with the TACAS+
authentication method
The tacacs+ method should not be the last
method specified.
3
line {aux 0 | console 0 | vty number
[end-number]}
CONFIGURATION Enter the LINE mode.
4
login authentication {method-list-name |
default}
LINE Assign the method-list to the terminal line.