HP 438031-B21 - 1:10Gb Ethernet BL-c Switch Command Reference Manual page 112

The following table describes the TACACS+ Server Configuration Menu options.
TACACS+ Server Configuration Menu options
Table 82
Command
prisrv <IP address>
secsrv <IP address>
secret <1-32 characters>
secret2 <1-32 characters>
port <TCP port number>
retries <1-3>
timeout <4-15>
bckdoor enable|disable
secbd enable|disable
cmap enable|disable
usermap <0-15>
user|oper|admin|none
on
off
cur
IMPORTANT:
If TACACS+ is enabled, you must login using TACACS+ authentication when
connecting via the console or Telnet/SSH/HTTP/HTTPS. Backdoor for console is always enabled,
so you can connect using notacacs and the administrator password even if the backdoor
(bckdoor) or secure backdoor (secbd) are disabled.
If Telnet backdoor is enabled (bckdoor ena), type notacacs as a backdoor to bypass
TACACS+ checking, and use the administrator password to log into the switch. The switch allows
this even if TACACS+ servers are available.
If secure backdoor is enabled (secbd ena), type in notacacs as a backdoor to bypass
TACACS+ checking, and use the administrator password to log into the switch. The switch allows
this only if TACACS+ servers are not available.
Description
Defines the primary TACACS+ server address.
Defines the secondary TACACS+ server address.
This is the shared secret between the switch and the TACACS+ server(s).
This is the secondary shared secret between the switch and the TACACS+
server(s).
Enter the number of the TCP port to be configured, between 1 and 65000.
The default is 49.
Sets the number of failed authentication requests before switching to a
different TACACS+ server. The range is 1-3 requests. The default is 3
requests.
Sets the amount of time, in seconds, before a TACACS+ server authentication
attempt is considered to have failed. The range is 4-15 seconds. The default
is 5 seconds.
Enables or disables the TACACS+ back door for telnet/SSH/HTTP/HTTPS.
This command does not apply when secure backdoor (secbd) is enabled.
Enables or disables the TACACS+ back door using secure password for
telnet/SSH/HTTP/HTTPS. This command does not apply when backdoor
(telnet) is enabled.
Enables or disables TACACS+ privilege-level mapping.
The default value is disabled.
Maps a TACACS+ authorization level to a switch user level. Enter a
TACACS+ authorization level (0-15), followed by the corresponding
HP 1:10GbE switch user level.
Enables the TACACS+ server.
Disables the TACACS+ server.
Displays current TACACS+ configuration parameters.
Configuration Menu
112