Orion A10E - Configuring TACACS+ Authentication; Default Configurations of TACACS

Orion Networks
A10E/A28E/A28F Configuration Guide
6 Security
Orion Networks
171
TACACS+ is safer and more reliable. The A10E/A28E can be used as the agent of the
TACACS+ server, controlling users according to feedback result from the TACACS+ server.
Prerequisite
N/A
6.5.3 Default configurations of TACACS+
The default configuration of TACACS+ is as below.
Function
Default value
TACACS+ function
Disable
Login mode
local-user
IP address of TACACS+ authentication server
0.0.0.0, shown as "--"
IP address of TACACS+ accounting server
0.0.0.0, shown as "--"
Shared key used for communication with TACACS+ accounting
server
Null
Accounting failure processing policy
online
Period for sending update packet
0
6.5.4 Configuring TACACS+ authentication
Configure TACACS+ authentication for the A10E/A28E as below.
Step
Configuration
Description
1
Alpha-A28E#config
Enter global configuration mode.
2
Alpha-
A28E(config)#interface ip
if-number
Enter Layer 3 interface configuration mode.
3
Alpha-A28E(config-ip)#ip
address ip-address [ ip-
mask ] [ vlan-list ]
Configure an IPv4 address.
4
Alpha-A28E(config-ip)#end
Return to privileged EXEC mode.
5
Alpha-A28E#tacacs-server
[ backup ] ip-address
Assign IP address and port ID for TACACS+
authentication server. Configure the backup
parameter to assign the backup TACACS+
authentication server.
6
Alpha-A28E#tacacs-server
key string
Configure the shared key for TACACS+
authentication.