Set Tacacs Command; Show Tacacs Singleconnect - Enterasys Matrix DFE-Gold Series Configuration Manual

set tacacs command

set tacacs command
Use this command to enable or disable TACACS+ accounting or authorization on a per‐command
basis.
Syntax
set tacacs command {accounting | authorization} {enable | disable}
Parameters
accounting |
authorization
enable | disable
Defaults
None.
Mode
Switch command, Read‐Write.
Usage
In order for per‐command accounting or authorization by a TACACS+ server to take place, the
command must be executed within an authorized session.
When per‐command accounting is enabled, the TACACS+ server will log accounting information,
such as start and stop times, IP address of the client, and so forth, for each command executed
during the session.
When per‐command authorization is enabled, the TACACS+ server will check whether each
command is permitted for that authorized session and return a success or fail. If the authorization
fails, the command is not executed.
Example
This example shows how to enable TACACS+ authorization on a command basis.
Matrix(rw)->set tacacs command authorization enable

show tacacs singleconnect

Use this command to display the current status of the TACACS+ client's ability to send multiple
requests over a single TCP connection.
Syntax
show tacacs singleconnect [state]
Parameters
state
Specifies either TACACS+ accounting or authorization to be enabled or
disabled.
Enable or disable accounting or authorization on a per‐command basis.
(Optional) Specifies that only the single connection state should be
displayed.
Enterasys Matrix DFE-Gold Series Configuration Guide 25-71
Configuring TACACS+