108 | Command Line Reference | SmartNA-X 1G/10G Modular
This device uses CHAP (Challenge-Handshake Authentication Protocol) when authenticating users with the TACACS+
server. On the TACACS+ server, you must configure the user or group privileges to 1 for an Audit user, 2 for an Operator,
or 3 for an Administrator. For example, privilege level 2 is given to a user or group of users on the TACACS+ server by
the following string in the user or group definition:
service = exec
{ priv-lvl = 2
}
Syntax
create tacacs authserver server-addr shared-secret
Parameters
•
ipv4 Specify the IPv4 address of the TACACS+ Authentication server to add .
•
shared-secret Server-client shared secret.
Example
Add the following TACACS+ Authentication server; enable TACACS+ and fallback to local authentication:
•
Address: 192.168.10.23
•
Shared-secret: tacacsSecret
CONTROLLER>create tacacs authserver 192.168.10.23 tacacsSecret
CONTROLLER>set authentication tacacs local
Change accepted
delete tacacs authserver
Use the delete tacacs authserver command to remove a TACACS+ Authentication server. Ensure your authentication
scheme (set authentication) includes local if no Authentication servers are configured, to prevent becoming locked out of
the system.
Syntax
delete tacacs authserver server-addr
Parameters
ipv4 Specify the IPv4 address of the TACACS+ Authentication server to remove.
Example
Delete TACACS+ Authentication server 192.168.10.23:
CONTROLLER>delete tacacs authserver 192.168.10.23
create tacacs accserver
Use the create tacacs accserver command to add TACACS+ Accounting servers (one server per command). Adding
an accounting server implicitly enables transaction logging on the accounting server(s). Note that local logging is not
supported by the system.
Syntax
create tacacs accserver server-addr shared-secret
Parameters
•
ipv4 Specify the IPv4 address of the TACACS+ Accounting server to add.
™
©
SmartNA-X
1G/10G User Guide 1.4
2015 Network Critical Solutions Limited
Need help?
Do you have a question about the SmartNA-X and is the answer not in the manual?