Cisco WS-C2948G-GE-TX Configuration Manual page 464

Configuring Authentication
Console> (enable) set tacacs server 172.20.52.10
172.20.52.10 added to TACACS server table as backup server.
Console> (enable) show tacacs
Login Authentication:
---------------------
tacacs
radius
local
Enable Authentication: Console Session
---------------------- ----------------- ----------------
tacacs
radius
local
Tacacs key:
Tacacs login attempts: 3
Tacacs timeout: 5 seconds
Tacacs direct request: disabled
Tacacs-Server
----------------------------------------
172.20.52.3
172.20.52.2
172.20.52.10
Console> (enable)
Enabling TACACS+ Authentication
Note Specify at least one TACACS+ server before enabling TACACS+ authentication on the switch. For more
information on specifying TACACS+ servers, see the
page
You can enable TACACS+ authentication for login and enable access to the switch. If desired, you can
enter the console and telnet keywords to specify that TACACS+ authentication is used only on console
or Telnet connections. If you are using both RADIUS and TACACS+, you can enter the primary
keyword to force the switch to try TACACS+ authentication first.
To enable TACACS+ authentication, perform this task in privileged mode:
Task
Step 1
Enable TACACS+ authentication for normal login
mode. Enter the console or telnet keywords if you
want to enable TACACS+ only for the console
port or for the Telnet connection attempts.
Step 2
Enable TACACS+ authentication for enable
mode. Enter the console or telnet keywords if you
want to enable TACACS+ only for the console
port or for the Telnet connection attempts.
Step 3
Verify the TACACS+ configuration.
Catalyst 4500 Series, Catalyst 2948G, Catalyst 2948G-GE-TX, and Catalyst 2980G Switches Software Configuration Guide—Release 8.2GLX
30-18
Console Session
----------------
disabled
disabled
enabled(primary)
disabled
disabled
enabled(primary)
30-17.
Chapter 30 Configuring Switch Access Using AAA
Telnet Session
----------------
disabled
disabled
enabled(primary)
Telnet Session
disabled
disabled
enabled(primary)
Status
-------
primary
"Specifying TACACS+ Servers" section on
Command
set authentication login tacacs enable [all |
console | http | telnet] [primary]
set authentication enable tacacs enable [all |
console | http | telnet] [primary]
show authentication
78-15908-01