Enterasys Matrix DFE-Gold Series

clear tacacs session Configuring TACACS+
Enterasys Matrix DFE-Gold Series Configuration Guide 25-69
Mode
Switchcommand,Read‐Write.
Usage
Whensessionaccountingisenabled,theTACACS+serverwilllogaccountinginformation,suchas
startandstoptimes,IPaddressoftheclient,andsoforth,foreachauthorizedclientsession.
WhentheTACACS+clientisenabledontheEnterasysMatrixswitch(withthesettacacsenable
command),thesessionauthorization
parametersconfiguredwiththiscommandaresentbythe
clienttotheTACACS+serverwhenasessionisinitiatedontheEnterasysMatrixswitch.The
parametervaluesmustmatchaserviceandaccesslevelattribute‐valuepairsconfiguredonthe
serverforthesessiontobeauthorized.Iftheparametervalues
donotmatch,thesessionwillnot
beallowed.
Theservicenameandattribute‐valuepairscanbeanycharacterstring,andaredeterminedby
yourTACACS+serverconfiguration.
Examples
ThisexampleconfigurestheservicerequestedbytheTACACS+clientastheservicename“basic.”
Matrix(rw)->set tacacs session authorization service basic
ThisexamplemapstheMatrixread‐writeaccessprivilegeleveltoanattributenamed“priv‐lvl”
withthevalueof5configuredontheTACACS+server.
Matrix(rw)->set tacacs session authorization read-write priv-lvl 5
ThisexampleenablesTACACS+sessi onaccounting.
Matrix(rw)->set tacacs session accounting enable
clear tacacs session
UsethiscommandtoreturntheTACACS+sessionauthorizationsettingstotheirdefaultvalues.
Syntax
clear tacacs session authorization { [service] [read-only] [read-write] [super-
user] }
Parameters
authorization ClearstheTACACS+sessionauthorizationparameters.
service ClearstheTACACS+sessionauthorizationservicenametothedefault
valueof“exec.”
read‐only ClearstheTACACS+sessionauthorizationread‐onlyattribute‐value
pairtotheirdefaultvaluesof“priv‐lvl”and0.
read‐write ClearstheTACACS+sessionauthorizationread‐writeattribute‐value
pairtotheirdefaultvaluesof“priv‐lvl”and1.
super‐user ClearstheTACACS+sessionauthorizationsuper‐userattribute‐value
pairtotheirdefaultvaluesof“priv‐lvl”and15.