Security Management
354
Managed Switches
2. Verify that TACACS authentication is set up for Telnet users.
3. Create a command authorization list and configure TACACS as the authorization.
4. Configure command and privileged EXEC authorization for Telnet.
5. Configure a TACACS+ server.
(Netgear Switch)#show authentication methods
Login Authentication Method Lists
---------------------------------
defaultList : local
networkList : tacacs
Enable Authentication Method Lists
----------------------------------
enableList : enable none
enableNetList : enable none
Line Login Method List Enable Method List
------- ----------------- ------------------
Console defaultList enableList
Telnet networkList enableList
SSH networkList enableList
HTTPS :local
HTTP :local
DOT1X :
(Netgear Switch)(Config)#aaa authorization commands "commandList" tacacs
(Netgear Switch)(Config)#line telnet
(Netgear Switch)(Config-telnet) #authorization commands commandList
(Netgear Switch)(Config-telnet) #exit
(Netgear Switch)(Config) #exit
(Netgear Switch)(Config)#tacacs-server host 10.100.5.13
(Netgear Switch)(Config)#tacacs-server key 12345678