Disabling Tacacs+ Server Keepalives On The Gss - Cisco GSS-4492R-K9 Administration Manual

Chapter 4 Managing GSS User Accounts Through a TACACS+ Server

Disabling TACACS+ Server Keepalives on the GSS

If you specified a TCP port other than default port 49, specify the following to
remove the key SECRET-123 without removing the server:
gss1.example.com(config)# no tacacs-server host 192.168.1.101 port
8877 key SECRET-123
Disabling TACACS+ Server Keepalives on the GSS
By default, the GSS enables the automatic use of TCP keepalives to periodically
query all online TACACS+ servers with a TCP keepalive to ensure network
connectivity and TACACS+ application operation. If the GSS determines that the
first TACACS server is down (offline), the GSS then attempts to connect to the
next server in the list of configured TACACS+ servers as the backup server. If a
second (or third) TACACS+ server is available for use, the GSS selects that server
as the active TACACS+ server.
To disable the use of TCP keepalives with the active TACACS+ server, use the no
form of the tacacs-server keepalive-enable command. The syntax for this global
configuration command is as follows:
no tacacs-server keepalive-enable
If you disable TCP keepalives, the GSS will continue to use the TACACS+
timeout period (that you specified in the tacacs-server timeout command) to wait
for a response to a connection attempt from a nonoperational TACACS+ server
before switching to the next server in the list of configured TACACS+ servers. See
the "Specifying the TACACS+ Server Timeout on the GSS" section for details on
defining a global TACACS+ timeout period.
To disable the use of TCP keepalives with the active TACACS+ server, enter:
gss1.example.com(config)# no tacacs-server keepalive-enable
To reenable the use of TCP keepalives with the active TACACS+ server, enter:
gss1.example.com(config)# tacacs-server keepalive-enable
Cisco Global Site Selector Administration Guide
4-22
OL-10410-01