clear tacacs server
Enterasys B5 CLI Reference 23-5
Mode
Switchcommand,Read‐Write.
Usage
Upto5TACACS+serverscan beconfigured,withtheindexvalueof1havingthehighestpriority.
Ifyouwanttochangethedefaulttimeoutvalueforaspecificserverorallservers,youmustenter
thecommandusingthetimeoutparameter.
Whenatleastonebackupserverhasbeen
configuredandtheswitchlosescontactwiththe
primaryserver,theswitchwillcontactthenextserverinpriority.Iftheswitchwastryingto
authenticateauserwhentheconnectionwaslost,orifthedefaultloginaccess(read‐only
permissions)hadbeenreceived,theswitchwilltrytoauthenticate
again.
Ifauserhadalreadybeenauthenticatedandauthorized,thenthebackupserveriscontacted
withoutrequiringanyauthentication.Thebackupserverwilljustauthorizeoraccountforthe
packetscominginforthatuser.SinceataskIDisassociatedwitheachaccountingsession,ifthere
isafailover
toabackupserver,theaccountinginformationwillstillbeassociatedwiththecorrect
sessionusingthetaskID.
Whenafailovertoabackupserveroccurs,syslogmessagesaregeneratedcontainingthereason
forthefailure.
Example
ThisexampleconfiguresTACACS+server1.Then,thedefaulttimeoutvalueof10secondsis
changedto20seconds.
B5(rw)->set tacacs server 1 192.168.10.10 49 mysecret
B5(rw)->set tacacs server 1 timeout 20
clear tacacs server
UsethiscommandtoremoveoneorallconfiguredTACACS+servers,ortoreturnthetimeout
valuetoitsdefaultvaluefor oneor allconfiguredTACACS+servers.
Syntax
clear tacacs server {all | index} [timeout]
Parameters
Defaults
Iftimeoutisnotspecified,theaffectedTACACS+serverswillberemoved.
Mode
Switchcommand,Read‐Write.
all SpecifiesthatallconfiguredTACACS+serversshouldbeaffected.
index
SpecifiesoneTACACS+servertobeaffected.
timeout (Optional)Returnthetimeoutvaluetoitsdefaultvalueof10seconds.