Edge-Core ES4624-SFP Basic Management Manual page 139

Command: tacacs-server authentication host <ip-address> [port <port-number>]
[timeout <seconds>] [key <string>] [primary]
no tacacs-server authentication host <ip-address>
Function: Configure the IP address, listening port number, the value of timeout timer and
the key string of the TACACS+ server; the "no" form of this command deletes TACACS+
authentication server.
Parameter: <ip-address> is the IPof the server;<port-number> is the listening port
number of the server, the valid range is 0~65535,amongst 0 indicates it will not be an
authentication server; <seconds> is the value of TACACS+ authentication timeout timer,
shown in seconds and the valid range is 1~60; <string> is the key string, containing
maximum 16 characters; primary indicates it's a primary server.
Command Mode: Global Mode
Default: No TACACS+ authentication configured on the system by default.
Usage Guide: This command is for specifying the IP address, port number, timeout timer
value and the key string of the TACACS+ server used on authenticating with the switch.
The parameter port is for define an authentication port number which must be in
accordance with the authentication port number of specified TACACS+ server which is
49 by default. The parameters key and timeout is used to configure the self-key and
self-timeout, if the switch is not configure the timeout<seconds> and key<string>, it will
use the global value and key by command tacacs-server timeout<seconds> and
tacacs-server key <string>. This command can configure several TACACS+ servers
communicate with the switch. The configuration sequence will be used as authentication
server sequence. And in case primary is configured on one TACACS+ server, the server
will be the primary server.
Example: Configure the TACACS+ authentication server address to 192.168.1.2, and
use the global configured key.
Switch(config)#tacacs-server authentication host 192.168.1.2
2.10.3.2 tacacs-server key
Command: tacacs-server key <string>
no tacacs-server key
Function: Configure the key of TACACS+ authentication server; the "no tacacs-server
key" command deletes the TACACS+ server key.
Parameter: <string> is the character string of the TACACS+ server key, containing
maximum 16 characters.
Command Mode: Global Mode
Usage Guide: The key is used on encrypted packet communication between the switch
and the TACACS+ server. The configured key must be in accordance with the one on the
139