Table of Contents
Advertisement
Security Command Reference
server
Syntax
server index address ip-address secret key [hash | hash2] [port port]
no server index
Context
config>system>security>tacplus
Description
This command adds a TACACS+ server and configures the TACACS+ server IP address, index, and
key values.
Up to five TACACS+ servers can be configured at any one time. TACACS+ servers are accessed in
order from the lowest index to the highest index for authentication requests.
The no form of the command removes the server from the configuration.
Default
no TACACS+ servers are configured
Parameters
index — the index for the TACACS+ server. The index determines the sequence in which the
ip-address — the IP address of the TACACS+ server. Two TACACS+ servers cannot have the
key — the secret key to access the RADIUS server. This secret key must match the password on
hash — specifies that the key is entered in an encrypted form. If the hash parameter is not used,
hash2 — specifies that the key is entered in a more complex encrypted form. If the hash2
port — the port ID
126
servers are queried for authentication requests. Servers are queried in order from the lowest
index to the highest index.
Values
1 to 5
same IP address. An error message is generated if the server address is a duplicate.
Values
ipv4-address
ipv6-address
the TACACS+ server.
Values
up to 20 characters in length
the key is assumed to be in an unencrypted, clear text form. For security, all keys are stored
in encrypted form in the configuration file with the hash parameter specified.
parameter is not used, the less encrypted hash form is assumed.
Values
0 to 65535
a.b.c.d (host bits must be 0)
x:x:x:x:x:x:x:x (eight 16-bit pieces)
x:x:x:x:x:x:d.d.d.d
x: [0 to FFFF]H
d: [0 to 255]D
7705 SAR OS System Management Guide
Advertisement
Table of Contents
