Tacacs And Tacacs+ Configuration Considerations - Dell PowerConnect B-RX Configuration Manual

4
Configuring TACACS and TACACS+ security
User action
User logs out of Telnet/SSH session
User enters system commands
(for example, reload, boot system)
User enters the command:
[no] aaa accounting system default
start-stop <method-list>
User enters other commands
AAA security for commands pasted Into the running configuration
If AAA security is enabled on the device, commands pasted into the running configuration are
subject to the same AAA operations as if they were entered manually.
When you paste commands into the running configuration, and AAA command authorization or
accounting is configured on the device, AAA operations are performed on the pasted commands.
The AAA operations are performed before the commands are actually added to the running
configuration. The server performing the AAA operations should be reachable when you paste the
commands into the running configuration file. If the device determines that a pasted command is
invalid, AAA operations are halted on the remaining commands. The remaining commands may not
be executed if command authorization is configured.

TACACS and TACACS+ configuration considerations

Consider the following before you configure TACACS and TACACS+:
•
•
86
You must deploy at least one TACACS and TACACS+ server in your network.
The device supports authentication using up to eight TACACS and TACACS+ servers. The device
tries to use the servers in the order you add them to the device's configuration.
Applicable AAA operations
Command accounting (TACACS+):
aaa accounting commands <privilege-level> default start-stop
<method-list>
EXEC accounting stop (TACACS+):
aaa accounting exec default start-stop <method-list>
Command authorization (TACACS+):
aaa authorization commands <privilege-level> default <method-list>
Command accounting (TACACS+):
aaa accounting commands <privilege-level> default start-stop
<method-list>
System accounting stop (TACACS+):
aaa accounting system default start-stop <method-list>
Command authorization (TACACS+):
aaa authorization commands <privilege-level> default <method-list>
Command accounting (TACACS+):
aaa accounting commands <privilege-level> default start-stop
<method-list>
System accounting start (TACACS+):
aaa accounting system default start-stop <method-list>
Command authorization (TACACS+):
aaa authorization commands <privilege-level> default <method-list>
Command accounting (TACACS+):
aaa accounting commands <privilege-level> default start-stop
<method-list>
BigIron RX Series Configuration Guide
53-1002253-01