Table of Contents
Advertisement
Configuring the Available Interfaces
The user must configure the remote servers for the TACACS+ protocol. Then the SCE platform
TACACS+ client must be configured to work with the TACACS+ servers. The following information
must be configured:
TACACS+ server hosts definition — a maximum of three servers is supported.
•
For each sever host, the following information can be configured:
–
–
–
–
Default encryption key (optional) — A global default encryption key may be defined. This key is
•
defined as the key for any server host for which a key is not explicitly configured when the server
host is defined.
If the default encryption key is not configured, a default of no key is assigned to any server for which
a key is not explicitly configured.
•
Default timeout interval (optional) — A global default timeout interval may be defined. This timeout
interval is defined as the timeout interval for any server host for which a timeout interval is not
explicitly configured when the server host is defined.
If the default timeout interval is not configured, a default of five seconds is assigned to any server
for which a timeout interval is not explicitly configured.
The procedures for configuring the SCE platform TACACS+ client are explained in the following
sections:
Monitoring Management Interface IP Filtering, page 5-11
•
How to Remove a TACACS+ Server Host, page 5-17
•
How to Configure the Global Default Key, page 5-17
•
How to Configure the Global Default Timeout, page 5-18
•
How to Add a new TACACS+ Server Host
Use this command to define a new TACACS+ server host that is available to the SCE platform TACACS+
client.
The Service Control solution supports a maximum of three TACACS+ server hosts.
Options
The following options are available:
•
host-name — name of the server
port number — TACACS+ port number
•
–
timeout interval — time in seconds that the server waits for a reply from the server host before
•
timing out
–
Cisco SCE 2000 and SCE 1000 Software Configuration Guide
5-16
hostname (required)
port
encryption key
timeout interval
Default = 49
Default = 5 seconds or user-configured global default timeout interval (see
Global Default Timeout, page
Chapter 5
Configuring the Management Interface and Security
5-18.)
How to Define the
OL-7827-12
Advertisement
Table of Contents
