beautypg.com

Authentication – Brocade Mobility RFS Controller CLI Reference Guide (Supporting software release 5.5.0.0 and later) User Manual

Page 1266

background image

1258

Brocade Mobility RFS Controller CLI Reference Guide

53-1003098-01

26

accounting server <1-2> host {secret [0 |2

|]} {port <1-65535>}

accounting server <1-2> timeout <3-5> {attempts <1-3>}

Example

rfs7000-37FABE(config-aaa-tacacs-policy-test)#accounting auth-fail

rfs7000-37FABE(config-aaa-tacacs-policy-test)#accounting commands

rfs7000-37FABE(config-aaa-tacacs-policy-test)#accounting server preference

authorized-server-number

rfs7000-37FABE(config-aaa-tacacs-policy-test)#show context

aaa-tacacs-policy test

accounting server preference authorized-server-number

accounting auth-fail

accounting commands

rfs7000-37FABE(config-aaa-tacacs-policy-test)#

Related Commands:

authentication

aaa-tacacs-policy

Configures user authentication parameters. Users are allowed or denied access to the network
based on the authentication parameters set.

Supported in the following platforms:

Access Points — Brocade Mobility 650 Access Point, Brocade Mobility 6511 Access Point,
Brocade Mobility 1220 Access Point, Brocade Mobility 71XX Access Point, Brocade
Mobility 1240 Access Point

server <1-2>

Configures an accounting server. Up to 2 accounting servers can be configured

host

Configures the accounting server’s IP address or hostname

secret [0 |
2 |]

Optional. Configures a common secret key used to authenticate with the accounting server

0 – Configures a clear text secret key

2 – Configures an encrypted secret key

– Specify the secret key. This shared secret should not exceed 127 characters.

port <1-65535>

Optional. Configures the accounting server port (the port used to connect to the accounting server)

<1-65535> – Specify the TCP accounting port number from 1 - 65535. The default port is 49.

server <1-2>

Configures an accounting server. Up to 2 accounting servers can be configured

timeout <3-5>

Configures the timeout for each request sent to the TACACS accounting server. This is the time allowed to
elapse before another request is sent to the TACACS accounting server. If a response is received from the
server within this time, no retry is attempted.

<3-5> – Specify a value from 3 - 5 seconds. The default is 3 seconds.

attempts <1-3>

Optional. Specifies the number of times a transmission request is attempted. This is the maximum
number of times a request is sent to the TACACS accounting server before getting discarded.

<1-3> – Specify a value from 1 - 3. The default is 3.

no

Resets values or disables commands