Raisecom ISCOM2600G-HI (A) Series - Default Configurations of TACACS; Configuring TACACS+ Authorization; Configuring TACACS+ Authentication

Raisecom
ISCOM2600G-HI (A) Series Configuration Guide
10 Security
Raisecom Proprietary and Confidential
Copyright © Raisecom Technology Co., Ltd.
423
10.5.3 Default configurations of TACACS+
Default configurations of TACACS+ are as below.
Function
Default value
TACACS+ function
Disable
Login mode
local-user
IP address of the TACACS+ authentication server
0.0.0.0, shown as "--"
IP address of the TACACS+ accounting server
0.0.0.0, shown as "--"
Shared key for communicating with the TACACS+ accounting
server
N/A
Processing policy for accounting failure
Online
Period for sending Account-Update packet
0
10.5.4 Configuring TACACS+ authorization
Configure TACACS+ authorization for the ISCOM2600G-HI series switch as below.
Step
Command
Description
1
Raisecom#aaa command authorize
{ enable | disable }
Enable TACACS+ command
authorization.
10.5.5 Configuring TACACS+ authentication
Configure TACACS+ authentication for the ISCOM2600G-HI series switch as below.
Step
Command
Description
1
Raisecom#tacacs-server
[ backup ] ip-address
[ auth-port port-id ]
Assign the IP address and port number for the
TACACS+ authentication server. Configure
the backup parameter to assign the backup
TACACS+ authentication server.
2
Raisecom#tacacs-server
quiet time
Configure the time for the master TACACS+
authentication server to restore to the
activation status.
3
Raisecom#tacacs-server
[ backup ] key string
Raisecom#tacacs-server
[ backup ] encrypt-key
string
Configure the shared plaintext or ciphertext
key for TACACS+ authentication. Configure
the backup parameter to assign the backup
TACACS+ authentication server.
4
Raisecom#user login
{ local-tacacs | tacacs-
local [ server-no-
response ] | tacacs-user }
Configure the login authentication mode to
TACACS+.