Cisco 350XG series Administration Manual page 406

Security
Configuring TACACS+
NOTE
STEP 1
STEP 2
STEP 3
Cisco 350XG & 550XG Series 10G Stackable Managed Switches
If more than one TACACS+ server has been configured, the device uses the
configured priorities of the available TACACS+ servers to select the TACACS+
server to be used by the device.
TACACS+
The TACACS+ page enables configuring TACACS+ servers.
Only users who have privilege level 15 on the TACACS+ server can administer the
device. Privilege level 15 is given to a user or group of users on the TACACS+
server by the following string in the user or group definition:
service = exec {
priv-lvl = 15
}
To configure TACACS+ server parameters:
Click Security > TACACS+.
Enable TACACS+ Accounting if required. See explanation in the
Using a TACACS+ Server
Enter the following default parameters:
• Key String—Enter the default Key String used for communicating with all
TACACS+ servers in Encrypted or Plaintext mode. The device can be
configured to use this key or to use a key entered for an specific server
(entered in the Add TACACS+ Server page).
If you do not enter a key string in this field, the server key entered in the Add
TACACS+ Server page must match the encryption key used by the
TACACS+ server.
If you enter both a key string here and a key string for an individual TACACS+
server, the key string configured for the individual TACACS+ server takes
precedence.
• Timeout for Reply—Enter the amount of time that passes before the
connection between the device and the TACACS+ server times out. If a
value is not entered in the Add TACACS+ Server page for a specific server,
the value is taken from this field.
• Source IPv4 Interface—Select the device IPv4 source interface to be used
in messages sent for communication with the TACACS+ server.
section.
19
Accounting
392