Dell PowerConnect B-FCXs Configuration Manual page 1207

Configuring TACACS/TACACS+ for devices in a Dell IronStack
Because devices operating in a Dell IronStack topology present multiple console ports, you must
take additional steps to secure these ports when configuring TACACS/TACACS+.
The following is a sample AAA console configuration using TACACS+.
aaa authentication login default tacacs+ enable
aaa authentication login privilege-mode
aaa authorization commands 0 default
aaa authorization exec default
aaa accounting commands 0 default start-stop
aaa accounting exec default start-stop
aaa accounting system default start-stop
enable aaa console
hostname Fred
ip address 144.10.6.56/255
tacacs-server host 255.253.255
tacacs-server key 1 $Gsig@U\
kill console
Syntax: kill console [all | unit]
•
•
Once AAA console is enabled, you should log out any open console ports on your IronStack using
the kill console command:
PowerConnecth(config)#kill console all
In case a user forgets to log out or a console is left unattended, you can also configure the console
timeout (in minutes) on all stack units (including the Active Controller).
PowerConnect(config)#stack unit 3
PowerConnect(config-unit-3)#console timeout 5
PowerConnect(config-unit-3)#exit
PowerConnect(config)#stack unit 4
PowerConnect(config-unit-4)#console timeout 5
Use the show who and the show telnet commands to confirm the status of console sessions.
stack9#show who
Console connections (by unit number):
1
2
3
4
Telnet connections (inbound):
1
2
3
4
5
Telnet connection (outbound):
PowerConnect B-Series FCX Configuration Guide
53-1002266-01
all - logs out all console port on stack units that are not the Active Controller
unit - logs out the console port on a specified unit
established
you are connecting to this session
4 seconds in idle
established
1 hours 3 minutes 12 seconds in idle
established
1 hours 3 minutes 9 seconds in idle
established
1 hours 3 minutes 3 seconds in idle
closed
closed
closed
closed
closed
Configuring TACACS/TACACS+ security
tacacs+
tacacs+
tacacs+
tacacs+
tacacs+
32
1165