328
Example
Enable the AAA function globally:
T1600G-52TS(config)# aaa enable
34.2 tacacas-server host
Description
The tacacs-server host command is used to configure a new TACACS+
server. To delete the specified TACACS+ server, please use no
tacacs-server host command.
Syntax
tacacs-server host
ip-address
[ port
port-id
]
[ timeout
time
] [ key { [ 0 ]
string
| 7
encryped-string
} ]
no tacacs-server host
ip-address
Parameter
ip-address
—— Specify the IP address of the TACACS+ server.
port-id
—— Specify the server’s port number for AAA. By default it is 49.
time
—— Specify the time in seconds the switch waits for the server’s
response before it times out. The time ranges from 1 to 9 seconds. The
default is 5 seconds.
[ 0 ]
string
| 7
encrypted-string
—— 0 and 7 are the encryption type. 0
indicates that an unencrypted key will follow. 7 indicates that a symmetric
encrypted key with a fixed length will follow. By default, the encryption type is
0. “
string
”
is
the shared key for the switch and the authentication servers to
exchange messages which contains 31 characters at most. The question
marks and spaces are not allowed. “
encrypted-string
” is a symmetric
encrypted key with a fixed length, which you can copy from another switch’s
configuration file. The key or encrypted-key you configured here will be
displayed in the encrypted form. Always configure the key as the last item of
this command.
Command Mode
Global Configuration Mode
Privilege Requirement
Only Admin level users have access to these commands.
To Next Page
Loading...
Need help?
General