Additional Tacacs+ Configuration - Siemens S223 User Manual

User Manual
SURPASS hiD 6615 S223/S323 R1.5
4.2.5.4
i
A50010-Y3-C150-2-7619
To specify a timeout value, use the following command.
Command
login tacacs timeout <1-100>

Additional TACACS+ Configuration

The hiD 6615 S223/S323 provides several additional options to configure the system au-
thentication via TACACS server.
TCP Port for the Authentication
To specify TCP port for the system authentication, use the following command.
Command
login tacacs socket-port
<1-65535>
no login tacacs socket-port
Authentication Type
To select the authentication type for TACACS+, use the following command.
Command
login tacacs auth-type {ascii |
pap | chap}
no login tacacs auth-type
Priority Level
You can define a priority level of user. According to the defined priority level, the user has
different authorization to access the DSLAM. This priority must define in the TACACS
server in the same way.
To define the priority level of user, use the following command.
Command
login tacacs priority-level {min |
user | max | root}
no login tacacs priority-level
The order of priority is root = max > user > min.
Mode
Specifies a timeout value.
Global
1-100: waiting-time for the response (default: 3)
Mode
Specifies TCP port for the authentication.
1-65535: TCP port
Global
Deleted the configured TCP port for the authentication
Mode
Selects the authentication type for TACACS+.
ascii: plain text
pap: password authentication protocol
Global
chap: challenge handshake authentication protocol
Deletes a specified authentication type.
Mode
Defines the priority level of user, refer the below infor-
mation for the order of priority.
Global
Deletes a defined priority level.
UMN:CLI
Description
Description
Description
Description
53