Tacacs+ Commands - D-Link 5000 Series Cli Reference Manual

5000 Series Layer 2/3 Managed Data Center Switch CLI Reference Guide
Malformed Access Responses....................... 0
Bad Authenticators............................... 0
Pending Requests................................. 0
Timeouts......................................... 0
Unknown Types.................................... 0
Packets Dropped.................................. 0

TACACS+ Commands

TACACS+ is used to provide access control, via one or more centralized servers, to networked devices.
Much like RADIUS, this protocol allows authentication to be simplified through th use of a single database
that can be shared among many clients on a large network. TACACS+ is founded upon the TACACS+
protocol (which is described in RFC1492), but in addition to the basic TACACS+ protocol, it allows for
separate authentication, accounting, and authorization services. Also, while the basic TACACS+ protocol
is UDP based and utilizes messages that are passed in clear text over the network, the TACACS+
protocol utilizes TCP to ensure reliable delivery, in addition to using a shared key that is configured on
both the client and the daemon server to encrypt all messages.
4-142 tacacs-server host
The tacacs-server host command is used in the Global Configuration mode to configure a TACACS+
server. This command is used to enter into the TACACS+ configuration mode. The ip-address/hostname
parameter consists of the IP address or the hostname of the TACACS+ server. Multiple tacacs-server
host commands can be used to specify multiple hosts.
The no command is used to delete a specified hostname or IP address. The ip-address/hostname
parameter consists of the IP address of the TACACS+ server.
tacacs-server host [ip-address | hostname]
no tacacs-server host [ip-address | hostname]
Parameters
ip-address
hostname
Default
The default is None.
Command Mode
Global Config
4-143 key
The key command is used to define the authentication and encryption key strings.
(Optional) Select the IP address of the TACACS+ server host to
configure.
(Optional) Select the hostname TACACS+ server host to configure.
122