ZXR102900ESeriesCongurationGuide
TACACS+supportsseparateauthentication,authorization,andaccounting.Different
TACACS+serverscanactrespectivelyastheauthentication,authorization,and
accountingservers.
ConguringTACACS+
TheTACACS+congurationincludesthefollowingcommands:
CommandFunction
zte(cfg-nas)#tacacs-plusgroup<group-name>{enable|disable}
Enablesordisablesaserver
group.
zte(cfg-nas)#tacacs-plusgroup<group-name>{add|delete}host
<A.B.C.D>[<49,1025-65535>|<4-180>|<string>]
Addsordeletesaserverina
TACACS+servergroup.
zte(cfg-nas)#tacacs-plusloginauthendefaultgroup<group-name>
SetsthedefaultTACACS+login
authenticationservergroup.
zte(cfg-nas)#tacacs-plusloginauthordefaultgroup<group-name>
Setsthedefaultservergroup
authorizedforTACACS+login.
zte(cfg-nas)#tacacs-plusadminauthendefaultgroup<group-name>
Setsthedefaultservergroup
authenticatedforTACACS+
management.
zte(cfg-nas)#tacacs-plusaccountingcommandsdefaultgroup<group-name>
Setsthedefaultservergroupfor
TACACS+MMLaccounting.
zte(cfg-nas)#tacacs-plusaccountingexecdefaultgroup<group-name>
Setsthedefaultservergroupfor
TACACS+useraccounting.
zte(cfg-nas)#tacacs-plusaccountingupdateperiod<1-2147483647>
Setstherefreshperiodfor
TACACS+useraccounting.
zte(cfg-nas)#cleartacacs-plusloginauthendefault
ClearsthedefaultTACACS+login
authenticationservergroup.
zte(cfg-nas)#cleartacacs-plusloginauthordefault
ClearsthedefaultTACACS+login
authorizationservergroup.
zte(cfg-nas)#cleartacacs-plusadminauthendefault
Clearsthedefaultservergroup
authenticatedforTACACS+
management.
zte(cfg-nas)#cleartacacs-plusaccountingcommandsdefault
Clearsthedefaultservergroupfor
TACACS+MMLaccounting.
zte(cfg-nas)#cleartacacs-plusaccountingexecdefault
Clearsthedefaultservergroupfor
TACACS+useraccounting.
zte(cfg-nas)#cleartacacs-plusaccountingupdate
Clearstherefreshperiodfor
TACACS+useraccounting.
showtacacs-plus(allcongurationmodes)
DisplaysTACACS+conguration
information.
4-134
SJ-20120409144109-002|2012-07-02(R1.0)ZTEProprietaryandCondential