Edge-Core ES4624-SFP Basic Management Manual page 140

TACACS+ server or else no correct TACACS+ authentication will be performed. It is
recommended to configure the authentication server key to ensure the data security.
Example: Configure test as the TACACS+ server authentication key.
Switch(config)# tacacs-server key test
2.10.3.3 tacacs-server nas-ipv4
Command: tacacs-server nas-ipv4 <ip-address>
no tacacs-server nas-ipv4
Function: Configure the source IP address of TACACS+ packet sent by the switch; the
"no tacacs-server nas-ipv4" command deletes the configuration.
Parameter: <ip-address> is the source IP address of TACACS+ packet, in dotted
decimal notation, it must be a valid unicast IP address.
Default: No specific source IP address for TACACS+ packet is configured, the IP
address of the interface from which the TACACS+ packets are sent is used as source IP
address of TACACS+ packet.
Command Mode: Global Mode
Usage Guide: The source IP address must belongs to one of the IP interface of the
switch, otherwise an failure message of binding IP address will be returned when the
switch send TACACS+ packet. We suggest using the IP address of loopback interface as
source IP address, it avoids that the packets from TACACS+ server are dropped when
the interface link-down.
Example: Configure the source ip address of TACACS+ packet as 192.168.2.254.
Switch#tacacs-server nas-ipv4 192.168.2.254
2.10.3.4 tacacs-server timeout
Command: tacacs-server timeout <seconds>
no tacacs-server timeout
Function: Configure a TACACS+ server authentication timeout timer; the "no
tacacs-server timeout" command restores the default configuration
Parameter: <seconds> is the value of TACACS+ authentication timeout timer,shown in
seconds and the valid range is 1~60.
Command Mode: Global Mode
Default: 3 seconds by default
Usage Guide: The command specifies the period the switch wait for the authentication
through TACACS+ server. When connected to the TACACS+, and after sent the
authentication query data packet to the TACACS+ server, the switch waits for the
response. If no replay is received during specified period, the authentication is
considered failed.
140