Chapter 14 Sys Screens
Management Switch Card User’s Guide
585
Shared Secret Specify a password (up to 32 alphanumeric characters) as the key to be shared between the
external TACACS+ server and the system. This key is not sent over the network. This key
must be the same on the external TACACS+ server and the MSC.
Delete Check this box if you want to remove an existing TACACS+ server entry from the MSC. This
entry is deleted when you click Apply.
Authorization
Server
Use this section to configure your TACACS+ authorization settings.
Mode This field is only valid if you configure multiple TACACS+ servers.
Select index-priority and the system tries to authorize using the first configured TACACS+
server, if the TACACS+ server does not respond then the system tries to authorize using the
second TACACS+ server.
Select round-robin to alternate between the TACACS+ servers.
Timeout Specify the amount of time in seconds that the system waits for an authorization request
response from the TACACS+ server.
If you are using index-priority for your authorization and you are using two TACACS+
servers then the timeout value is divided between the two TACACS+ servers. For example, if
you set the timeout value to 30 seconds, then the system waits for a response from the first
TACACS+ server for 15 seconds and then tries the second TACACS+ server.
Index This is a read-only number representing a TACACS+ server entry.
IP Address Enter the IP address of an external TACACS+ server in dotted decimal notation.
TCP Port The default port of a TACACS+ server for authorization is 49. You need not change this value
unless your network administrator instructs you to do so.
Shared Secret Specify a password (up to 32 alphanumeric characters) as the key to be shared between the
external TACACS+ server and the system. This key is not sent over the network. This key
must be the same on the external TACACS+ server and the MSC.
Delete Check this box if you want to remove an existing TACACS+ server entry from the MSC. This
entry is deleted when you click Apply.
Accounting
Server
Use this section to configure your TACACS+ accounting settings.
Mode This field is only valid if you configure multiple TACACS+ servers.
Select index-priority and the system tries to use the first configured TACACS+ server for
accounting, if the TACACS+ server does not respond then the system tries to use the second
TACACS+ server.
Select round-robin to alternate between the TACACS+ servers.
Timeout Specify the amount of time in seconds that the system waits for an accounting request
response from the TACACS+ server.
Index This is a read-only number representing a TACACS+ accounting server entry.
IP Address Enter the IP address of an external TACACS+ accounting server in dotted decimal notation.
TCP Port The default port of a TACACS+ server for accounting is 49. You need not change this value
unless your network administrator instructs you to do so.
Shared Secret Specify a password (up to 32 alphanumeric characters) as the key to be shared between the
external TACACS+ accounting server and the system. This key is not sent over the network.
This key must be the same on the external TACACS+ accounting server and the system.
Delete Check this box if you want to remove an existing TACACS+ accounting server entry from the
system. This entry is deleted when you click Apply.
Table 314 TACACS+ Server Setup (continued)
LABEL DESCRIPTION
To Next Page
Loading...
