Authentication Commands
4-85
4
Example
TACACS+ Client
Terminal Access Controller Access Control System (TACACS+) is a logon
authentication protocol that uses software running on a central server to control
access to TACACS-aware devices on the network. An authentication server
contains a database of multiple user name/password pairs with associated privilege
levels for each user or group that require management access to a switch.
tacacs-server host
This command specifies TACACS+ servers and parameters. Use the no form to
restore the default.
Syntax
[no] tacacs-server index host {host_ip_address} [port port_number]
[timeout timeout] [retransmit retransmit] [key key]
• index - Specifies the index number of the server. (Range: 1)
• host_ip_address - IP address of the server.
Console#show radius-server
Global Settings:
Communication Key with RADIUS Server:
Auth-Port: 1812
Acct-port: 1813
Retransmit Times: 2
Request Timeout: 5
Server 1:
Server IP Address: 10.1.2.3
Communication Key with RADIUS Server: ******
Auth-Port: 1812
Acct-port: 1813
Retransmit Times: 2
Request Timeout: 5
Radius server group:
Group Name Member Index
--------------------- -------------
radius 1
Console#
Table 4-31 TACACS+ Commands
Command Function Mode Page
tacacs-server host Specifies the TACACS+ server GC 4-85
tacacs-server port Specifies the TACACS+ server network port GC 4-86
tacacs-server key Sets the TACACS+ encryption key GC 4-87
tacacs-server retransmit Sets the number of retries GC 4-87
tacacs-server timeout Sets the interval before resending an authentication request GC 4-88
show tacacs-server Shows the current TACACS+ settings GC 4-88