Tacacs+ Accounting; Default Tacacs+ Configuration; How To Configure Tacacs; Identifying The Tacacs+ Server Host And Setting The Authentication Key - Cisco Catalyst 2960-X Security Configuration Manual

Configuring TACACS+
Related Topics
Configuring TACACS+ Authorization for Privileged EXEC Access and Network Services, on page 50
Prerequisites for TACACS+, on page 39

TACACS+ Accounting

The AAA accounting feature tracks the services that users are accessing and the amount of network resources
that they are consuming. When AAA accounting is enabled, the switch reports user activity to the TACACS+
security server in the form of accounting records. Each accounting record contains accounting attribute-value
(AV) pairs and is stored on the security server. This data can then be analyzed for network management, client
billing, or auditing.
Related Topics
Starting TACACS+ Accounting, on page 52

Default TACACS+ Configuration

TACACS+ and AAA are disabled by default.
To prevent a lapse in security, you cannot configure TACACS+ through a network management application.
When enabled, TACACS+ can authenticate users accessing the switch through the CLI.
Although TACACS+ configuration is performed through the CLI, the TACACS+ server authenticates
Note
HTTP connections that have been configured with a privilege level of 15.

How to Configure TACACS+

This section describes how to configure your switch to support TACACS+.
Related Topics
Method List, on page 44
Prerequisites for TACACS+, on page 39

Identifying the TACACS+ Server Host and Setting the Authentication Key

Follow these steps to identify the TACACS+ server host and set the authentication key:
OL-29048-01
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
TACACS+ Accounting
45