Chapter 4 Managing Gss User Accounts Through A Tacacs+ Server - Cisco GSS-4492R-K9 Administration Manual

Managing GSS User Accounts
Through a TACACS+ Server
This chapter describes how to configure the GSS, primary GSSM, or standby
GSSM as a client of a Terminal Access Controller Access Control System Plus
(TACACS+) server for separate authentication, authorization, and accounting
(AAA) services. Configuring the GSS as a client of a TACACS+ server provides
a higher level of security by allowing you to control who can access a GSS device,
control which CLI commands are available for particular users, and to use the
TACACS+ server to record the specific CLI commands and GUI pages accessed
by a GSS user.
This chapter contains the following major sections:
•
•
•
•
•
•
•
•
•
•
OL-10410-01
TACACS+ Overview
TACACS+ Configuration Quick Start
Configuring a TACACS+ Server for Use with the GSS
Identifying the TACACS+ Server Host on the GSS
Disabling TACACS+ Server Keepalives on the GSS
Specifying the TACACS+ Server Timeout on the GSS
Specifying TACACS+ Authentication of the GSS
Specifying TACACS+ Authorization of the GSS
Specifying TACACS+ Accounting on the GSS
Showing TACACS+ Statistics on the GSS
C H A P T E R
Cisco Global Site Selector Administration Guide
4
4-1