Configuring Tacacs+ Servers - Motorola BSR 2000 Configuration And Management Manual

Release 1.0
In large enterprise networks, the task of administering security on every individual
device is resource intensive. TACACS+ provides the means to remotely manage
network security from one TACACS+ server. The network administrator provides the
BSR with the IP address or hostname of the TACACS+ server. The TACACS+ client
runs on the BSR and interacts with the TACACS+ server to:
Configuring TACACS+ on the BSR involves the following tasks:

Configuring TACACS+ Servers

The tacacs-server host command specifies the names of the IP host or hosts
maintaining a TACACS+ server. The following additional options can also be
configured for TACACS+ servers:
526360-001-00 Rev. B
Authentication is a service that determines who the user is and whether they are
allowed access to the BSR.
Authorization is a service that determines what tasks the user is allowed to do on
the BSR.
Accounting is a service that collects data related to resource usage.
Authenticate each user before allowing access to the management console.
Perform authorization when a user attempts to run a command or access a
privilege level.
Provide an accounting of resource usage.
Configuring TACACS+ Servers
Enabling AAA
Configuring AAA Authentication
Configuring AAA Authorization
Configuring AAA Accounting
Specifying a Global Encryption Key
all traffic between all BSR TACACS+ client and the TACACS+ server to provide
security.
Specifying a Global Port Number
will be used for all communication between the TACACS+ server and the
TACACS+ client. This is a the TCP/IP port (socket on which TACACS+ server
listens). When connecting to this TACACS+ server, the BSR should open the use
this destination port.
- A global encryption key is used to encrypt
- A global port number specifies one port that
MGBI
Configuring the System
3-51