Configuring Tacacs Plus - Cabletron Systems IA1100 User's Reference Manual

Chapter 14: Security Configuration Guide

Configuring TACACS Plus

You can secure login or Enable mode access to the IA by enabling a TACACS Plus client. A
TACACS Plus server responds to the IA TACACS Plus client to provide authentication.
You can configure up to five TACACS Plus server targets on the IA. A timeout is set to tell
the IA how long to wait for a response from TACACS Plus servers.
To configure TACACS Plus security, enter the following commands in Configure mode:
Specify a TACACS Plus server.
Set the TACACS Plus time to wait
for a TACACS Plus server reply.
Determine the IA action if no
server responds.
Enable TACACS Plus.
Cause TACACS Plus
authentication at user login or
when user tries to access Enable
mode.
Cause TACACS Plus
authentication at user login or
when user tries to access Enable
mode.
Logs specified types of command
to TACACS Plus server.
Logs to TACACS Plus server
when shell is stopped or started
on IA.
Logs to TACACS Plus server
SNMP changes to startup or
active configuration.
Logs specified type(s) of
messages to TACACS Plus server.
230
tacacs-plus set server <hostname or IP-addr>
tacacs-plus set timeout
tacacs-plus set last-resort
password|succeed
tacacs-plus enable
tacacs-plus authentication login|enable
tacacs-plus authentication login|enable
tacacs-plus accounting command level
level
< >
tacacs-plus accounting shell
start|stop|all
tacacs-plus accounting snmp
active|startup
tacacs-plus accounting system
fatal|error|warning|info
Internet Appliance User Reference Manual
<number>