Cisco WS-C2950SX-48-SI Configuration Manual page 463

Chapter 30 Configuring Switch Access Using AAA
To enable TACACS+ authentication, perform this task in privileged mode:
Task
Step 1
Enable TACACS+ authentication for normal login
mode. Enter the console or telnet keywords if you
want to enable TACACS+ only for console port or
Telnet connection attempts.
Step 2 Enable TACACS+ authentication for enable
mode. Enter the console or telnet keywords if you
want to enable TACACS+ only for console port or
Telnet connection attempts.
Step 3 Verify the TACACS+ configuration.
This example shows how to enable TACACS+ authentication for console and Telnet connections and
how to verify the configuration:
Console> (enable) set authentication login tacacs enable
tacacs login authentication set to enable for console and telnet session.
Console> (enable) set authentication enable tacacs enable
tacacs enable authentication set to enable for console and telnet session.
Console> (enable) show authentication
Login Authentication:
---------------------
tacacs
radius
local
Enable Authentication: Console Session
---------------------- ----------------- ----------------
tacacs
radius
local
Console> (enable)
Specifying the TACACS+ Key
Note If you configure a TACACS+ key on the client, make sure that you configure an identical key on the
TACACS+ server.
To specify the TACACS+ key, perform this task in privileged mode:
Task
Step 1
Specify the TACAS+ key that is used to encrypt
packets.
Step 2
Verify the TACACS+ configuration.
This example shows how to specify the TACACS+ key and verify the configuration:
Console> (enable) set tacacs key Secret_TACACS_key
The tacacs key has been set to Secret_TACACS_key.
Console> (enable) show tacacs
78-15486-01
Console Session
----------------
enabled(primary)
disabled
enabled
enabled(primary)
disabled
enabled
Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
Command
set authentication login tacacs enable [all |
console | http | telnet] [primary]
set authentication enable tacacs enable [all |
console | http | telnet] [primary]
show authentication
Telnet Session
----------------
enabled(primary)
disabled
enabled
Telnet Session
enabled(primary)
disabled
enabled
Command
set tacacs key key
show tacacs
Configuring Authentication
—
Release 8.1
30-19