Cisco 2100 Series Configuration Manual page 212

Configuring TACACS+
Perform one of the following:
Step 3
To edit an existing TACACS+ server, click the server index number for that server. The TACACS+
•
(Authentication, Authorization, or Accounting) Servers > Edit page appears.
To add a TACACS+ server, click New. The TACACS+ (Authentication, Authorization, or
•
Accounting) Servers > New page appears (see
Figure 5-10
If you are adding a new server, choose a number from the Server Index (Priority) drop-down box to
Step 4
specify the priority order of this server in relation to any other configured TACACS+ servers providing
the same service. You can configure up to three servers. If the controller cannot reach the first server, it
tries the second one in the list and then the third if necessary.
If you are adding a new server, enter the IP address of the TACACS+ server in the Server IP Address
Step 5
field.
From the Shared Secret Format drop-down box, choose ASCII or Hex to specify the format of the shared
Step 6
secret key to be used between the controller and the TACACS+ server. The default value is ASCII.
In the Shared Secret and Confirm Shared Secret fields, enter the shared secret key to be used for
Step 7
authentication between the controller and the server.
Note
If you are adding a new server, enter the TACACS+ server's TCP port number for the interface protocols
Step 8
in the Port Number field. The valid range is 1 to 65535, and the default value is 49.
From the Server Status field, choose Enabled to enable this TACACS+ server or choose Disabled to
Step 9
disable it. The default value is Enabled.
Cisco Wireless LAN Controller Configuration Guide
5-24
TACACS+ Authentication Servers > New Page
The shared secret key must be the same on both the server and the controller.
Chapter 5
Figure 5-10).
Configuring Security Solutions
OL-17037-01