Tacacs+ Configuration; Tacacs+ Overview; Configuring Tacacs - Zte ZXR10 5900 Series User Manual

ZXR10 5900/5200 Series User Manual (Basic Configuration Volume)
Command
tacacs enable
ZXR10(config)#
Command
tacacs disable [clear]
ZXR10(config)#
124 Confidential and Proprietary Information of ZTE CORPORATION

TACACS+ Configuration

TACACS+ Overview

TACACS+, Terminal Access Controller Access Control System, is
the most popular AAA protocol which is the simplified name of Au-
thorization, Authentication and Accounting. TACACS+ supports in-
dependent authentication, authorization and accounting, allowing
different TACACS+ security server to be authentication, authoriza-
tion and accounting server respectively.
PPP user and Telnet user that use the system service should be au-
thenticated, authorized and accounted in ZXROS. TACACS+ proto-
col can solve this problem effectively. TACACS+ module provides
centralized security authentication, authorization and accounting
for logging user.
TACACS+ software module in ZXROS is client software authen-
ticated by TACACS+. It implements the protocol interaction be-
tween NAS and TACACS+ security server to complete TACACS+
AAA function. TACACS+ client also provides the operation that
TACACS+ configuration needs to configure TACACS+ environment.
At present, ZXR10 5900/5200 supports TACACS+ authentication
to provide authentication of Telnet users accessing the routers.
ZXR10 5900/5200 supports multiple TACACS+ server groups.
Each TACACS+ group permits the configuration of four authen-
tication servers and each group can be configured with two
parameters: server timeout time and retry times. The adminis-
trator can configure different TACACS+ server groups to select a
specific TACACS+ server.

Configuring TACACS+

1. To enable TACACS+ protocol function, use the following com-
mand.
2. To disable TACACS+ protocol function, use the following com-
mmand.
3. To configure TACACS+ server group member, use the following
command.
Function
This enables TACACS+ protocol
function.
Function
This disables TACACS+ protocol
function.