Configuring A Tacacs+ Server - Allied Telesis SwitchBlade x3100 Series Manual

Introduction

6.8.3 Configuring a TACACS+ Server

6.8.3.1 Default Configuration
When an SBx3112 switch is initially booted up, there is no TACACS+ server configured.
6.8.3.2 Configuration Guidelines
TACACS+ users have a security level of 1 to 15; for the SBx3112, 1 corresponds with User, 7 with Manager,
and 15 with Security Officer. Therefore, the Network Access product users "manager" and "securityofficer"
correspond to the TACACS+ users "$enab7$" and "$enab15$". If these are not configured in TACACS+, then
TACACS+ will refuse the authentication when a user tries the command "Enable manager/securityofficer".
Also, the syntax of this command depends on the level of the user; someone at the User level will have both
manager/securityofficer as options while someone at the Manager level will have only securityofficer available (if
they are data filled at the TACACS+ server).
6.8.3.3 Configuration Procedure
The following procedure shows the commands used to set up a TACACS+ server.
TABLE 6-17
Step Command
Add a TACACS+ server. Status of Enabled, Port of 49, Retries of 3, and Timeout of 5 are all default settings.
ADD TACPLUS SERVER 10.10.10.20
1
Show the TACACS+ server status. The default status of TACACS+ server is Enabled. The default settings for Port,
Retries, and Timeout are 49, 3 and 5, respectively.
SHOW TACPLUS
2
--- TACACS+ -------------------------------------------------------------------
Auth Mode............................. Login
-------------------------------------------------------------------------------
--- TACACS+ Servers -----------------------------------------------------------
Hostname/IP Address Status
------------------- -------- ---- ----- ----- ------- ------- ----------------
10.10.10.20
Add a shared key
ADD TACPLUS SERVER 10.10.10.20 KEY MEOW
3
Enable authentication
SET TACPLUS SERVER 10.10.10.20 AUTHENTICATION ON
4
6-78
Software Reference for SwitchBlade x3100 Series Switches (Access and Security)
Configuration Procedure for TACACS+
Acct
Pri Port Port
Enabled 1 49 1813
Configuring a TACACS+ Server
Description
Retries Timeout Function
3 5