C
HAPTER
23
| Authentication Commands
TACACS+ Client
– 618 –
Retransmit Times : 2
Request Timeout : 5
Key :
Server 1:
Server IP Address : 192.168.1.1
Authentication Port Number : 1812
Accounting Port Number : 1813
Retransmit Times : 2
Request Timeout : 5
Key : *
Radius Server Group:
Group Name Member Index
------------------------- -------------
radius 1
Console#
TACACS+ CLIENT
Terminal Access Controller Access Control System (TACACS+) is a logon
authentication protocol that uses software running on a central server to
control access to TACACS-aware devices on the network. An authentication
server contains a database of multiple user name/password pairs with
associated privilege levels for each user or group that require management
access to a switch.
tacacs-server host This command specifies the TACACS+ server and other optional
parameters. Use the no form to remove the server, or to restore the
default values.
SYNTAX
tacacs-server index host host-ip-address [key key]
[port port-number] [retransmit retransmit] [timeout timeout]
no tacacs-server index
index - The index for this server. (Range: 1)
host-ip-address - IP address of a TACACS+ server.
key - Encryption key used to authenticate logon access for the
client. Do not use blank spaces in the string. (Maximum length: 48
characters)
Table 68: TACACS+ Client Commands
Command Function Mode
tacacs-server host Specifies the TACACS+ server and optional
parameters
GC
tacacs-server key Sets the TACACS+ encryption key GC
tacacs-server port Specifies the TACACS+ server network port GC
show tacacs-server Shows the current TACACS+ settings GC