GarrettCom MNS-6K 4.1.4 - Manual (Page 120)

M A G N U M 6 K S W I T C H E S , M N S - 6 K U S E R G U I D E
Syntax tacplus [ order=] - enable or disable TACACS
authentication, specifying the order in which the server or local database is looked up where “tac,local”
implies, first the TACAS+ server, then local logins on the device. Default order is Local then
TACACS+ server.
Syntax tacserver id= [ip=] [port=]
[encrypt=] [key=] [mgrlevel=]
[oprlevel=]
– adds a list of up to five TACACS+ servers where
– [mandatory] adds or delete a TACACS+ server.
id= – [mandatory] the order in which the TACACS+ servers should be polled for
authenticaton
[ip=] – [mandatory for add] the IP address of the TACACS+ server
[port=] – [optional for add] TCP port number on which the server is listening
[encrypt=] – [optional for add] enable or disable packet encryption
[key=] – [optional for add, mandatory with encrypt] when encryption is enabled,
the secret shared key string must be supplied
[mgrlevel=] and [oprlevel=] – [optional] specifies the manager and
operator level as defined on the TACACS+ server for the respective level of login
Magnum6K25#
show tacplus servers
ID TACACS+ Server Port Encrypt Key
================================================
1
10.21.1.170 49 Enabled secret
2 -- -- -- --
3 -- -- -- --
4 -- -- -- --
5 -- -- -- --
Magnum6K25#
user
Magnum6K25(user)##
Magnum6K25(user)##
show tacplus status
TACACS+ Status : Disabled
Magnum6K25(user)##
tacplus disable
TACACS+ Tunneling is disabled.
Magnum6K25(user)##
tacserver add id=2 ip=10.21.1.123 encrypt=enable key=some
TACACS+ server is added.
Magnum6K25(user)##
show tacplus servers
ID
TACACS+ Server Port Encrypt Key
Check the status of TACACS+ authentication.
Note – this command was run in the user
configuration mode.
To configure TACACS+ enter the user configuration mode
This command works in the user configuration
mode as well. Note – maximum of five
TACACS+ servers.
119