Table of Contents
Advertisement
| Authentication Commands
C
11
HAPTER
auth tacacs+
This command displays or sets TACACS+ authentication server settings.
S
YNTAX
auth tacacs+ [server-index] [enable | disable] [ip-addr] [secret]
[server-port]
server-index - Allows you to specify up to five servers. These
servers are queried in sequence until a server responds or the
retransmit period expires.
enable - Enables the specified TACACS+ authentication server.
disable - Disables the specified TACACS+ authentication server.
ip-addr - IP address or IP alias of authentication server. An IPv4
address consists of 4 numbers, 0 to 255, separated by periods.
secret - Encryption key used to authenticate logon access for the
client. (Maximum length: 29 characters)
server-port - Network (UDP) port of authentication server used for
authentication messages. (Range: 0-65535, where 0 means that
the switch will use the default port 1812)
To set an empty secret, use two quotes (""). To use spaces in the
secret, enquote the secret. Quotes in the secret are not allowed.
D
S
EFAULT
ETTING
Authentication: Disabled
Server Port: 49
C
U
OMMAND
SAGE
◆
By default, management access is always checked against the
authentication database stored on the local switch. If a remote
authentication server is used, you must specify the authentication
method and the corresponding parameters for the remote
authentication protocol. Local and remote logon authentication control
management access via Telnet, SSH, or a web browser.
When using TACACS+ logon authentication, the user name and
◆
password must be configured on the authentication server. The
encryption methods used for the authentication process must also be
configured or negotiated between the authentication server and logon
client. This switch can pass authentication messages between the
server and client that have been encrypted using MD5 (Message-Digest
5), TLS (Transport Layer Security), or TTLS (Tunneled Transport Layer
Security).
This guide assumes that RADIUS servers have already been
N
:
OTE
configured to support AAA. The configuration of TACACS+ server software
is beyond the scope of this guide. Refer to the documentation provided
with the RADIUS and server software.
– 224 –
Advertisement
Table of Contents
Troubleshooting
