Configuring The Tacacs+ Client - Alcatel-Lucent OmniSwitch 6800 Series Network Configuration Manual

TACACS+ Server

Configuring the TACACS+ Client

Use the aaa tacacs+-server
TACACS+ server keywords
key
host
When creating a new server, at least one host name or IP address (specified by the host keyword) is
required as well as the shared secret (specified by the key keyword).
In this example, the server name is tac1, the host address is 10.10.5.2, the backup address is 10.10.5.5, and
the shared secret is otna. Note that the shared secret must be configured exactly the same as on the server.
-> aaa tacacs+-server tac1 host 10.10.5.2 10.10.5.5 key otna
To modify a TACACS+ server, enter the server name and the desired parameter to be modified.
-> aaa tacacs+-server tac1 key tnemelc
If you are modifying the server and have just entered the aaa tacacs+-server command to create or
modify the server, you can use command prefix recognition. For example:
-> aaa tacacs+-server tac1 timeout 5
For information about server defaults, see
To remove a TACACS+ server, use the no form of the command:
-> no aaa tacacs+-server tac1
Note that only one server may be deleted at a time.
page 25-16
command to configure TACACS+ parameters on the switch.
timeout
port
"Server Defaults" on page
OmniSwitch 6800/6850/9000 Network Configuration Guide
Managing Authentication Servers
25-3.
March 2008