TACACS+ Authentication
Terminology Used in TACACS Applications:
server for authentication services. If the switch fails to connect to any
TACACS+ server, it defaults to its own locally assigned passwords for authen-
tication control if it has been configured to do so. For both Console and Telnet
access you can configure a login (read-only) and an enable (read/write)
privilege level access.
Notes Regarding Software release E.05.04 (or greater) for the Series 5300XL switches enables
Software
TACACS+ authentication, which allows or denies access to a Series 5300XL
Release E.05.04
switches on the basis of correct username/password pairs managed by the
(or Greater)
TACACS+ server, and to specify the privilege level to allow if access is granted.
This release does not support TACACS+ authorization or accounting services.
In release E.05.xx, TACACS+ does not affect web browser interface access.
See “Controlling Web Browser Interface Access” on page 4-24.
Terminology Used in TACACS
Applications:
■ NAS (Network Access Server): This is an industry term for a
TACACS-aware device that communicates with a TACACS server for
authentication services. Some other terms you may see in literature
describing TACACS operation are communication server, remote
access server, or terminal server. These terms apply to a Series
5300XL switches when TACACS+ is enabled on the switch (that is,
when the switch is TACACS-aware).
■ TACACS+ Server: The server or management station configured as
an access control server for TACACS-enabled devices. To use
TACACS+ with the Series 5300XL switches and any other TACACS-
capable devices in your network, you must purchase, install, and
configure a TACACS+ server application on a networked server or
management station in the network. The TACACS+ server application
you install will provide various options for access control and access
notifications. For more on the TACACS+ services available to you,
see the documentation provided with the TACACS+ server applica-
tion you will use.
4-3