TACACS+ Configuration
When per‐command accounting is enabled, the TACACS+ server will log accounting information,
such as start and stop times, IP address of the client, and so forth, for each command executed
during the session.
When per‐command authorization is enabled, the TACACS+ server will check whether each
command is permitted for that authorized session and return a success or fail. If the authorization
fails, the command is not executed.
Example
This example shows how to enable TACACS+ authorization on a command basis.
C3(rw)->set tacacs command authorization enable
show tacacs singleconnect
Use this command to display the current status of the TACACS+ client's ability to send multiple
requests over a single TCP connection.
Syntax
show tacacs singleconnect
Parameters
None.
Defaults
None.
Mode
Switch command, Read‐Write.
Example
This example shows how to display the state of the TACACS+ client's ability to send multiple
requests over a single connection.
C3(rw)->show tacacs singleconnect
TACACS+ single-connect state:
set tacacs singleconnect
Use this command to enable or disable the ability of the TACACS+ client to send multiple requests
over a single TCP connection. When enabled, the TACACS+ client will use a single TCP
connection for all requests to a given TACACS+ server.
Syntax
set tacacs singleconnect {enable | disable}
Parameters
enable | disable
27-10
enabled
Enable or disable the ability to send multiple requests over a single TCP
connection.
show tacacs singleconnect