Configuring The Tacacs+ Client - OmniSwitch os6900 Network Configuration Manual

Managing Authentication Servers

Configuring the TACACS+ Client

Use the aaa tacacs+-server
TACACS+ server keywords
key
host
When creating a new server, at least one host name or IP address (specified by the host keyword) is
required as well as the shared secret (specified by the key keyword).
In this example, the server name is tac1, the host address is 10.10.5.2, the backup address is 10.10.5.5, and
the shared secret is otna. Note that the shared secret must be configured exactly the same as on the server.
-> aaa tacacs+-server tac1 host 10.10.5.2 10.10.5.5 key otna
To modify a TACACS+ server, enter the server name and the desired parameter to be modified.
-> aaa tacacs+-server tac1 key tnemelc
If you are modifying the server and have just entered the aaa tacacs+-server command to create or
modify the server, you can use command prefix recognition. For example:
-> aaa tacacs+-server tac1 timeout 5
For information about server defaults, see
To remove a TACACS+ server, use the no form of the command:
-> no aaa tacacs+-server tac1
Note that only one server can be deleted at a time.
OmniSwitch AOS Release 7 Network Configuration Guide
command to configure TACACS+ parameters on the switch.
timeout
port
"Server Defaults" on page 29-3.
June 2013
TACACS+ Server
page 29-13