Configuration Guide TACACS+ Configuration
tacacs-server host ip-address
[port integer] [timeout integer] key
[0 | 7] string
Configure IP address of remote TACACS+ security
server; configures different parameters on this
server by different parameter combination:
ip-address :configures server address;
port intege [optional] :determines the port used
by the server; By default , the port number is
49 with the range from 1 to 65535.
timeout integer [optional] :configures server
timeout time; By default, the timeout time is 5s
with the range from 1 to 1000s.
key string [optional]:configures the key shared
with the server of corresponding ip.
tacacs-server key [0 | 7] string
Configure the shared key used to communicate
between the device and TACACS+ server. If the
corresponding host does not set key by itself, you
should set it globally.
tacacs-server timeout seconds
Specify the waiting time before the device resends
request. By default, it is 5s. if the specified host
does not set the specified timeout time, you should
set the time globally.
Ip tacacs source-interface interface
Specify to send tacacs+ request to the source IP
used by the server. By default, it does not specify.
You must configure TACACS+ Key before configuring TACACS+.
The shared passwords on the network device and TACACS+
server must be consistent.
Using TACACS+ to Authenticate, Authorize and Account
In the typical TACACS+ network configuration figure, TACACS+ server authenticates,
authorizes and accounts the access users. The following shows the examples of how
to configure TACACS+ to authenticate, authorize and account by login authentication,
authorization and accounting.
To Next Page
Loading...
