Typical Tacacs+ Scenarios - Edge-Core ES4624-SFP Manual

2.9.3.3 tacacs-server timeout
Command: tacacs-server timeout <seconds>
no tacacs-server timeout
Function: Configure a TACACS+ server authentication timeout timer; the "no
tacacs-server timeout" command restores the default configuration
Parameter: <seconds> is the value of TACACS+ authentication timeout timer,shown in
seconds and the valid range is 1~60.
Command Mode: Global Mode
Default: 3 seconds by default
Usage Guide: The command specifies the period the switch wait for the authentication
through TACACS+ server. When connected to the TACACS+, and after sent the
authentication query data packet to the TACACS+ server, the switch waits for the
response. If no replay is received during specified period, the authentication is
considered failed.
Example: Configure the timeout timer of the tacacs+ server to 30 seconds
Switch(Config)# tacacs-server timeout 30
2.9.3.4 debug tacacs-server
Command: debug tacacs=server
no debug tacacs-server
Function: Open the debug message of the TACACS+; the "no debug tacacs-server"
command closes the TACACS+ debugging messages
Command Mode: Admin Mode
Parameter: None
Usage Guide: Enable the TACACS+ debugging messages to check the negotiation
process of the TACACS+ protocol which can help detecting the failure.
Example: Enable the debugging messages of the TACACS+ protocol
Switch#debug tacacs-server

2.9.4 Typical TACACS+ Scenarios

123