Configuring Login Authentication - Cisco WS-C2955T-12 Software Manual

Configuring TACACS+
Beginning in privileged EXEC mode, follow these steps to configure the TACACS+ server:
Command
Step 1
tacacs-server host name [timeout
integer] [key string]
Step 2 tacacs-server retransmit retries
Step 3 tacacs-server timeout seconds
Step 4
tacacs-server attempts count
Step 5
tacacs-server key key
Step 6
exit
Step 7 show tacacs

Configuring Login Authentication

Beginning in privileged EXEC mode, follow these steps to configure login authentication by using
AAA/TACACS+:
Command
Step 1
configure terminal
Step 2
aaa new-model
Step 3 aaa authentication login {default |
list-name} method1 [method2...]
Step 4 line [aux | console | tty | vty]
line-number [ending-line-number]
Step 5 login authentication {default |
list-name}
Step 6 exit
Step 7
show running-config
Catalyst 2900 Series XL and Catalyst 3500 Series XL Software Configuration Guide
6-52
Purpose
Define a TACACS+ host.
Entering the timeout and key parameters with this command overrides the
global values that you can enter with the tacacs-server timeout (Step 3) and
the tacacs-server key commands (Step 5).
Enter the number of times the server searches the list of TACACS+ servers
before stopping.
The default is two.
Set the interval that the server waits for a TACACS+ server host to reply.
The default is 5 seconds.
Set the number of login attempts that can be made on the line.
Define a set of encryption keys for all of TACACS+ and communication
between the access server and the TACACS daemon.
Repeat the command for each encryption key.
Return to privileged EXEC mode.
Verify your entries.
Purpose
Enter global configuration mode.
Enable AAA/TACACS+.
Enable authentication at login, and create one or more lists of authentication
methods.
Enter line configuration mode, and configure the lines to which you want to
apply the authentication list.
Apply the authentication list to a line or set of lines.
Return to privileged EXEC mode.
Verify your entries.
Chapter 6 Configuring the System
78-6511-08