C
HAPTER
24
| Authentication Commands
TACACS+ Client
– 592 –
Retransmit Times : 2
Request Timeout : 5
Server 1:
Server IP Address : 192.168.1.1
Auth-port : 1812
Acct-port : 1813
Retransmit Times : 2
Request Timeout : 5
Console#
TACACS+ CLIENT
Terminal Access Controller Access Control System (TACACS+) is a logon
authentication protocol that uses software running on a central server to
control access to TACACS-aware devices on the network. An authentication
server contains a database of multiple user name/password pairs with
associated privilege levels for each user or group that require management
access to a switch.
tacacs-server This command specifies the TACACS+ server and other optional
parameters. Use the no form to remove the server, or to restore the
default values.
SYNTAX
tacacs-server index host host-ip-address [key key]
[port port-number]
no tacacs-server index
index - The index for this server. (Range: 1)
host-ip-address - IP address of a TACACS+ server.
key - Encryption key used to authenticate logon access for the
client. Do not use blank spaces in the string. (Maximum length: 48
characters)
port-number - TACACS+ server TCP port used for authentication
messages. (Range: 1-65535)
Table 64: TACACS+ Client Commands
Command Function Mode
tacacs-server Specifies the TACACS+ server and optional
parameters
GC
tacacs-server host Specifies the TACACS+ server GC
tacacs-server key Sets the TACACS+ encryption key GC
tacacs-server port Specifies the TACACS+ server network port GC
show tacacs-server Shows the current TACACS+ settings GC