Setting The Tacacs+ Login Attempts; Enabling Tacacs+ Directed Request - Cisco WS-C4003 - Catalyst 4000 Chassis Switch Software Configuration Manual

Configuring Authentication
This example shows how to set the server timeout interval and verify the configuration:
Console> (enable) set tacacs timeout 30
Tacacs timeout set to 30 seconds.
Console> (enable) show tacacs
Tacacs key: Secret_TACACS_key
Tacacs login attempts: 3
Tacacs timeout: 30 seconds
Tacacs direct request: disabled
Tacacs-Server
----------------------------------------
172.20.52.3
172.20.52.2
172.20.52.10
Console> (enable)

Setting the TACACS+ Login Attempts

You can specify the number of failed login attempts allowed.
To specify the number of login attempts allowed, perform this task in privileged mode:
Task
Step 1
Configure the number of allowed login attempts. set tacacs attempts number
Step 2
Verify the TACACS+ configuration.
This example shows how to set the number of login attempts and verify the configuration:
Console> (enable) set tacacs attempts 5
Tacacs number of attempts set to 5.
Console> (enable) show tacacs
Tacacs key: Secret_TACACS_key
Tacacs login attempts: 5
Tacacs timeout: 30 seconds
Tacacs direct request: disabled
Tacacs-Server
----------------------------------------
172.20.52.3
172.20.52.2
172.20.52.10
Console> (enable)

Enabling TACACS+ Directed Request

When TACACS+ directed request is enabled, users must specify the host name of a configured
TACACS+ server (in the form username@server_hostname) or the authentication request will fail.
To enable TACACS+ directed request, perform this task in privileged mode:
Task
Step 1
Enable TACACS+ directed request on the switch. set tacacs directedrequest enable
Step 2 Verify the TACACS+ configuration.
Software Configuration Guide—Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4
27-20
Chapter 27 Configuring Switch Access Using AAA
Status
-------
primary
Command
show tacacs
Status
-------
primary
Command
show tacacs
78-12647-02