Configuring Tacacs+ Authentication - Cisco WS-C2950SX-48-SI Configuration Manual

Chapter 30 Configuring Switch Access Using AAA
lockout timeout (sec)
Enable Authentication: Console Session
---------------------- ----------------- ----------------
tacacs
radius
kerberos
local
attempt limit
lockout timeout (sec)
* Local User Authentication disabled.
Console> (enable)
Deleting a Local User Account
To delete a local user account on the switch, perform this task in privileged mode:
Task
Step 1 Delete a local user account.
Step 2
Verify that the local user account has been deleted.
This example shows how to disable local user authentication for the switch and how to verify the
configuration:
Console> (enable) clear localuser number1
Console> (enable) show localusers
Username
---------
picard
Console> (enable)

Configuring TACACS+ Authentication

The following sections describe how to configure TACACS+ authentication on the switch.
Specifying TACACS+ Servers
Specify one or more TACACS+ servers before you enable TACACS+ authentication on the switch. The
first server that you specify is the primary server, unless you explicitly make one server the primary
server by using the primary keyword.
To specify one or more TACACS+ servers, perform this task in privileged mode:
Task
Step 1
Specify the IP address of one or more TACACS+ servers. set tacacs server ip_addr [primary]
Step 2 Verify the TACACS+ configuration.
78-15486-01
disabled
disabled
disabled
disabled
* enabled(primary)
3
disabled
Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
disabled
Telnet Session
disabled
disabled
disabled
enabled(primary)
3
disabled
Command
clear localuser picard
show localusers
Privilege Level
-------------
15
Command
show tacacs
Configuring Authentication
-
Http Session
----------------
disabled
disabled
disabled
enabled(primary)
-
-
—
Release 8.1
30-17