Cisco 500 series Administration Manual page 304

Configuring Security
Configuring TACACS+
STEP 1
STEP 2
STEP 3
STEP 4
STEP 5
STEP 6
Cisco 500 Series Stackable Managed Switch Administration Guide
TACACS+ servers cannot be used as 802. 1 X authentication servers to verify
credentials of network users trying to join the networks through the switch.
Some TACACS+ servers support a single connection that enables the device to
receive all information in a single connection. If the TACACS+ server does not
support this, the device reverts to multiple connections.
Configuring Default TACACS+ Parameters
The TACACS+ page enables configuring TACACS+ servers.
Only users who have privilege level 15 on the TACACS+ server can administer the
switch. Privilege level 15 is given to a user or group of users on the TACACS+
server by the following string in the user or group definition:
service = exec {
priv-lvl = 15
}
To configure TACACS+ server parameters:
Click Security > TACACS+. The TACACS+ page is displayed.
Enter the default Key String used for communicating with all TACACS+ servers in
Encrypted or Plaintext mode. The switch can be configured to use this key or to
use a key entered for an specific server (entered in the Add TACACS+ Server
page).
If you do not enter a key string in this field, the server key entered in the Add
TACACS+ Server page must match the encryption key used by the TACACS+
server.
If you enter both a key string here and a key string for an individual TACACS+
server, the key string configured for the individual TACACS+ server takes
precedence.
In the Timeout for Reply field, enter the amount of time that passes before the
connection between the switch and the TACACS+ server times out. If a value is
not entered in the Add TACACS+ Server page for a specific server, the value is
taken from this field.
Click Apply. The TACACS+ settings are added to the Running Configuration file.
To add a TACACS+ server, click Add. The Add TACACS+ Server page is
displayed.
Enter the parameters.
18
304