Dell POWERCONNECT 6200 SERIES - Page 121

Device Security 121
Figure 5-4. PowerConnect 6200 Series Switch with TACACS+
When a user attempts to log into the switch, the NAS or switch prompts for a username and password.
The switch attempts to communicate with the highest priority configured TACACS+ server at
10.10.10.10. Upon successful connection with the server, the switch and server exchange the login
credentials over an encrypted channel. The server then grants or denies access, which the switch honors,
and either allows or does not allow the user to gain access to the switch. If neither of the two servers can
be contacted, the switch searches its local user database for the user.
console# config
console(config)#tacacs-server host 10.10.10.10
console(config)#key tacacs1
console(config)#exit
console(config)#tacacs-server host 11.11.11.11
console(config)#key tacacs2
console(config)#priority 2
console(config)#exit
console(config)#aaa authentication login tacacsList tacacs local