Configuring Tacacs Plus; Monitoring Tacacs Plus - Cabletron Systems SmartSwitch Router User's Reference Manual

Chapter 18: Security Configuration Guide

Configuring TACACS Plus

You can secure login or Enable mode access to the SSR by enabling a TACACS Plus client.
A TACACS Plus server responds to the SSR TACACS Plus client to provide
authentication.
You can configure up to five TACACS Plus server targets on the SSR. A timeout is set to
tell the SSR how long to wait for a response from TACACS Plus servers.
To configure TACACS Plus security, enter the following commands in Configure mode:
Specify a TACACS Plus server.
Set the TACACS Plus time to wait
for a TACACS Plus server reply.
Determine the SSR action if no
server responds.
Enable TACACS Plus.
Cause TACACS Plus
authentication at user login or
when user tries to access Enable
mode.
Cause TACACS Plus
authentication at user login or
when user tries to access Enable
mode.
Logs specified types of command
to TACACS Plus server.
Logs to TACACS Plus server
when shell is stopped or started
on SSR.
Logs to TACACS Plus server
SNMP changes to startup or
active configuration.
Logs specified type(s) of
messages to TACACS Plus server.

Monitoring TACACS Plus

You can monitor TACACS Plus configuration and statistics within the SSR.
274
tacacs-plus set server <hostname or IP-addr>
tacacs-plus set timeout
tacacs-plus set last-resort
password|succeed
tacacs-plus enable
tacacs-plus authentication login|enable
tacacs-plus authentication login|enable
tacacs-plus accounting command level
level
< >
tacacs-plus accounting shell
start|stop|all
tacacs-plus accounting snmp
active|startup
tacacs-plus accounting system
fatal|error|warning|info
SmartSwitch Router User Reference Manual
<number>