Cisco WS-X6066-SLB-APC - Content Switching Module Software Manual page 428

Configuring Authentication
Console> (enable) show tacacs
Login Authentication:
---------------------
tacacs
radius
local
Enable Authentication: Console Session
---------------------- ----------------- ----------------
tacacs
radius
local
Tacacs key:
Tacacs login attempts: 3
Tacacs timeout: 5 seconds
Tacacs direct request: disabled
Tacacs-Server
----------------------------------------
172.20.52.3
172.20.52.2
172.20.52.10
Console> (enable)
Enabling TACACS+ Authentication
Specify at least one TACACS+ server before enabling TACACS+ authentication on the switch. For
Note
information on specifying a TACACS+ server, see the
page
You can enable TACACS+ authentication for login and enable access to the switch. If desired, you can
use the console and telnet keywords to specify that TACACS+ authentication be used only on console
or Telnet connections. If you are using both RADIUS and TACACS+, you can use the primary keyword
to force the switch to try TACACS+ authentication first.
To enable TACACS+ authentication, perform this task in privileged mode:
Task
Step 1
Enable TACACS+ authentication for normal login
mode. Enter the console or telnet keyword if you
want to enable TACACS+ only for console port or
Telnet connection attempts.
Step 2 Enable TACACS+ authentication for enable
mode. Enter the console or telnet keyword if you
want to enable TACACS+ only for console port or
Telnet connection attempts.
Step 3 Verify the TACACS+ configuration.
This example shows how to enable TACACS+ authentication for console and Telnet connections and
how to verify the configuration:
Console> (enable) set authentication login tacacs enable
tacacs login authentication set to enable for console and telnet session.
Catalyst 6000 Family Software Configuration Guide—Releases 6.3 and 6.4
21-18
Console Session
----------------
disabled
disabled
enabled(primary)
disabled
disabled
enabled(primary)
21-17.
Chapter 21 Configuring Switch Access Using AAA
Telnet Session
----------------
disabled
disabled
enabled(primary)
Telnet Session
disabled
disabled
enabled(primary)
Status
-------
primary
"Specifying TACACS+ Servers" section on
Command
set authentication login tacacs enable [all |
console | http | telnet] [primary]
set authentication enable tacacs enable [all |
console | http | telnet] [primary]
show authentication
78-13315-02