Table of Contents
Advertisement
Chapter 4
Managing GSS User Accounts Through a TACACS+ Server
Specifying the TACACS+ Server Timeout on the GSS
Specifying TACACS+ Authentication of the GSS
Note
OL-10410-01
As a secondary measure, if the TCP keepalives fail, or if you disable the use of
keepalives, you can use the tacacs-server timeout command to define a global
TACACS+ timeout period, in seconds, that specifies how long the GSS waits for
a response to a connection attempt from a TACACS+ server. The timeout value
applies to all defined TACACS+ servers. The default timeout period is 5 seconds.
To specify the timeout period, use the tacacs-server timeout command. The
syntax for this global configuration command is as follows:
tacacs-server timeout seconds
The seconds argument is a value from 1 to 255 seconds. The GSS dynamically
applies the modified timeout period and the new value takes effect automatically
on the next TACACS+ connection.
For example, to set the timeout period to 60 seconds, enter:
gss1.example.com(config)# tacacs-server timeout 60
To reset the timeout period to the default of 5 seconds, enter:
gss1.example.com(config)# no tacacs-server timeout 60
After you identify a TACACS+ server, you can enable the TACACS+
authentication service on the GSS by using the aaa authentication command to
enable TACACS+ authentication. By default, the GSS falls back to local
authentication with either the console port or a Telnet connection if the GSS
cannot remotely contact a TACACS+ server. Optionally, you can specify local
authentication if TACACS+ authentication fails for an FTP, GUI, or SSH
connection.
You must enable remote access on the GSS device (SSH, Telnet, or FTP) before
you enable TACACS+ authentication for the specific GSS access method. See the
Cisco Global Site Selector Getting Started Guide for details.
Specifying the TACACS+ Server Timeout on the GSS
Cisco Global Site Selector Administration Guide
4-23
Hide quick links:
Advertisement
Table of Contents
