Tavve zoneranger User Manual page 300

tacacsServer
port
-
spoof
requests is the source address of the original sending device managed by the ZoneRanger or the
address of the Ranger Gateway.
•
•
- specifies the level of logging for TACACS+ proxy requests
log
•
•
•
configTacacsServers
Gateway. Prior to Ranger Gateway 5.0, in order to configure TACACS+ proxy support, TACACS+
servers had to be listed in the Ranger Gateway configuration. Beginning with Ranger Gateway 5.0,
that is no longer the case. Any TACACS+ servers already configured may be displayed or removed
by the
configTacacsServers
configTraffic
configTraffic subcommand [arguments]
configTraffic
log level.
subcommand
•
•
•
•
•
•
•
displays the current traffic configuration settings
view
set..forwarded
per_zr
total
generic
netflow
sflow
syslog
ZoneRanger 5.5 User's Guide
specifies the name of the TACACS+ server to remove
specifies the port the TACACS+ server is using.
can be used to indicate whether or not the source address in the TACACS+ client
spoofing is enabled
on:
spoofing is disabled
off:
Logging is turned off.
none:
Only message headers are logged
short:
Entire messages are logged
full:
can be used to modify the TACACS+ configuration settings on the Ranger
command.
configures traffic thresholds, enables and disables notification, and sets the traffic
can be one of the following:
view
set [per_zr] forwarded [total|generic|netflow|sflow|syslog|
trap] value
set [per_zr] proxied [icmp|ntp|radius|snmp|tacacs] value
check_thresholds [per_zr] [forwarded|proxied] [on|off]
notify [per_zr] [forwarded|proxied] [on|off]
interval value
log [none|short|full]
sets the thresholds for forwarded traffic
specifies the threshold is on a per IP address basis.
specifies the threshold is for total traffic
specifies the threshold is for generic UDP only.
specifies the threshold is for netFlow packets only.
specifies the threshold is for sFlow packets only.
specifies the threshold is for syslog messages only.
.
.
300