beautypg.com

25 tacacs commands, 1 tacacs-server host, Syntax – Planet Technology WGSD-8000 User Manual

Page 333: Default configuration, Command mode, User guidelines

background image

User’s Manual of WGSD-1022/WGSD-8000

- 333 –

5.25 TACACS Commands

5.25.1 tacacs-server host

The tacacs-server host command in global configuration mode specifies a TACACS+ host. To delete the specified name or

address, use the no form of this command.

Syntax

tacacs-server host {ip-address

| hostname} [single-connection] [port port-number] [timeout timeout] [key keystring]

[source source] [priority priority]

no tacacs-server host ip-address

ƒ

ip-address — Name or IP address of the host. An out-of-band IP address can be specified as described in the usage

guidelines.

ƒ

hostname — Hostname of the tacacs server. (Range: 1 - 160 characters)

ƒ

single-connection — Specify single-connection. Rather than have the device open and close a TCP connection to the

daemon each time it must communicate, the single-connection option maintains a single open connection between the

device and the daemon.

ƒ

port-number — Specify a server port number. If unspecified, the port number defaults to 49. (Range: 0 - 65535)

ƒ

timeout—Specifies the timeout value in seconds. If no timeout value is specified, the global value is used. (Range: 1 -

1000)

ƒ

key-string — Specifies the authentication and encryption key for all TACACS communications between the device and

the TACACS server. This key must match the encryption used on the TACACS daemon. If no key string value is

specified, the global value is used. (Range: Up to 160 characters)

ƒ

source — Specifies the source IP address to use for the communication. If no source value is specified, the global value

is used.

ƒ

priority — Determines the order in which the servers will be used, when 0 is the highest priority. If unspecified defaults to

0. (Range: 0 - 65535)

Default Configuration

No TACAS host is specified

Command Mode

Global Configuration mode

User Guidelines

Multiple tacacs-server host commands can be used to specify multiple hosts.

If no host-specific timeout, key or source values are specified, the global values apply to each host.

To define TACACS server on the out-of-band port, use the out-of-band IP address format: oob/ip-address.