Tacacs+ Commands - D-Link DXS-3600-16S Manual

TACACS+ Commands

61-1 tacacs-server host
This command is used to configure the IP address of TACACS+ server host. The no form of this command without
parameters is used to delete the TACACS+ server host. The no form of this command with the parameters is used to
restore the specified parameter to default value.
tacacs-server host ip-address [port integer] [timout integer] [key string]
no tacacs-server host ip-address [port | timout | key]
Parameters
ip-address
port integer
timeout integer
key string
Default
Command Mode
Command Default Level
Usage Guideline
Example
DXS-3600-32S#configure terminal
DXS-3600-32S(config)#tacacs-server host 192.168.12.1
DXS-3600-32S(config)#
61-2 tacacs-server key
This command is used to configure global password of TACACS+.
tacacs-server key string
no tacacs-server key
Parameters
string
Default
Command Mode
Command Default Level
Usage Guideline
DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide
Specifies the IP address of the TACACS+ server host.
Specifies the TCP port used in TACACS+ communication. The range is 1 to 65535. If
unspecified, the port number defaults to 49.
Specifies the timeout value of the TACACS+ host. The range is 1 to 1000s.
Specifies the shared keyword of the TACACS+ client and server. The maximum
length of the key is 254.
No specified TACACS+ host.
Global Configuration Mode.
Level: 15
To use TACACS+ to implement AAA security service, you must define TACACS+
secure server. You can define one or multiple TACACS+ secure servers by using
tacacs-server.
This example shows how to define a TACACS+ secure server host.
Specifies the text of the shared password. The maximum length of the key is 254.
No specified shared password.
Global Configuration Mode.
Level: 15
The device and TACACS+ secure server communicates with each other successfully
on the basis of the shared password. Therefore, in order to make the device and
TACACS+ secure server communicate with each other, the same shared password
must be defined on both of them. When we need to specify different passwords to
every server, use key option in host command. We can set a key to all the servers
that have not set key option in global configuration mode.
591