Security
ExtremeWare XOS 11.3 Concepts Guide
334
Enabling and Disabling TACACS+ Accounting
After you configure TACACS+ accounting server information, you must enable accounting before the
switch begins transmitting the information. You must enable TACACS+ authentication for accounting
information to be generated. You can enable and disable accounting without affecting the current state
of TACACS+ authentication.
To enable TACACS+ accounting, use the following command:
enable tacacs-accounting
To disable TACACS+ accounting, use the following command:
disable tacacs-accounting
TACACS+ Accounting Configuration Example
This section provides a sample TACACS+ accounting server configuration.
The following example:
● Configures the primary TACACS+ accounting server
● Configures the shared secret for the primary TACACS+ accounting server
● Configures the secondary TACACS+ accounting server
● Configures the shared secret for the secondary TACACS+ accounting server
● Enables TACACS+ accounting on the switch
All other settings use the default settings as described earlier in this section or in the ExtremeWare XOS
Command Reference Guide.
configure tacacs-accounting primary server 10.201.31.238 client-ip 10.201.31.85 vr
"VR-Default"
configure tacacs-accounting primary shared-secret purple
configure tacacs-accounting secondary server 10.201.31.235 client-ip 10.201.31.85 vr
"VR-Default"
config tacacs-accounting secondary shared-secret purple
enable tacacs-accounting
To display the TACACS+ accounting server settings, use the show tacacs or the show tacacs-
accounting
command. The following is sample output from the show tacacs command:
TACACS+: enabled
TACACS+ Authorization: enabled
TACACS+ Accounting : enabled
TACACS+ Server Connect Timeout sec: 3
Primary TACACS+ Server:
Server name :
IP address : 10.201.31.238
Server IP Port: 49
Client address: 10.201.31.85 (VR-Default)
Shared secret : purple
Secondary TACACS+ Server:
Server name :
IP address : 10.201.31.235
Server IP Port: 49
To Next Page
Loading...