HP E3800-24G-PoE+-2SFP+ Access Security Manual page 207

HP Switch(config)# show running-config
Running configuration:
; J9573A Configuration Editor; Created on release #KA.15.03.3003
; Ver #01:00:01
hostname "HP Switch"
module 1 type J9573x
vlan 1
name "DEFAULT_VLAN"
untagged 1-24
ip address dhcp-bootp
exit
banner motd "good morning
tacacs-server host 10.10.10.2 key "hp~network"
snmp-server community "public" unrestricted
Figure 5-7. Example of the Running Configuration File Showing the Host-Specific Key for TACACS+
with the "~" Included
Figure 5-8. Example of the Switch with Two TACACS+ Server Addresses Configured
Adding, Removing, or Changing the Priority of a TACACS+ Server.
Suppose that the switch was already configured to use TACACS+ servers at
10.28.227.10 and 10.28.227.15. In this case, 10.28.227.15 was entered first, and
so is listed as the first-choice server:
HP Switch(config)# show tacacs
Status and Counters - TACACS Information
Timeout : 5
Encryption Key :
Server IP Address
-----------------
10.28.227.15
10.28.227.10
To move the "first-choice" status from the "15" server to the "10" server, use
the no tacacs-server host <ip-addr> command to delete both servers, then use
tacacs-server host <ip-addr> to re-enter the "10" server first, then the "15" server.
The servers would then be listed with the new "first-choice" server, that is:
Shows the key configured for a specific host.
Closes Aborts Errors Pkts Rx
------ ------ ------ -------- -------
0 0 0
0 0 0
TACACS+ Authentication
Configuring TACACS+ on the Switch
Pkts Tx
0 0
0 0
5-21