Cisco Catalyst 2960-XR Security Configuration Manual page 66

Identifying the TACACS+ Server Host and Setting the Authentication Key
SUMMARY STEPS
1. configure terminal
2. tacacs-server host hostname
3. aaa new-model
4. aaa group server tacacs+ group-name
5. server ip-address
6. end
DETAILED STEPS
Command or Action
Step 1 configure terminal
Example:
Switch# configure terminal
Step 2 tacacs-server host hostname
Example:
Switch(config)# tacacs-server host
yourserver
Step 3
aaa new-model
Example:
Switch(config)# aaa new-model
Step 4 aaa group server tacacs+ group-name
Example:
Switch(config)# aaa group server tacacs+
your_server_group
Step 5 server ip-address
Example:
Switch(config)# server 10.1.2.3
Step 6 end
Example:
Switch(config)# end
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
44
Purpose
Enters the global configuration mode.
Identifies the IP host or hosts maintaining a TACACS+ server.
Enter this command multiple times to create a list of preferred hosts.
The software searches for hosts in the order in which you specify
them.
For hostname, specify the name or IP address of the host.
Enables AAA.
(Optional) Defines the AAA server-group with a group name.
This command puts the switch in a server group subconfiguration
mode.
(Optional) Associates a particular TACACS+ server with the
defined server group. Repeat this step for each TACACS+ server
in the AAA server group.
Each server in the group must be previously defined in Step 2.
Returns to privileged EXEC mode.
Configuring TACACS+
OL-29434-01