Brocade Multi-Service IronWare Security Configuration Guide (Supporting R05.6.00) User Manual

Page 63

Advertising
background image

Multi-Service IronWare Security Configuration Guide

45

53-1003035-02

Configuring TACACS or TACACS+ security

1

Displaying TACACS or TACACS+ statistics and
configuration information

The show aaa command displays information about all TACACS+ and RADIUS servers identified on
the device.

Example

Brocade# show aaa

TACACS default key: ...

TACACS retries: 3

TACACS timeout: 3 seconds

TACACS+ Server: IP=10.20.80.20 Port=49 Usage=any Key=...

opens=0 closes=0 timeouts=0 errors=0

packets in=0 packets out=0

Radius default key: ...

Radius retries: 3

Radius timeout: 3 seconds

Radius Server: IP=10.20.99.134 Auth Port=1812 Acct Port=1813 Usage=any

Key=...

opens=7 closes=7 timeouts=24 errors=0

packets in=7 packets out=79

Health-check=disabled dead-time-interval=45

auto-authenticate-time-interval=30 available

Radius Server: IP=10.20.99.135 Auth Port=1812 Acct Port=1813 Usage=any

Key=...

opens=72 closes=72 timeouts=0 errors=0

packets in=72 packets out=72

Health-check=disabled dead-time-interval=45

auto-authenticate-time-interval=30 available

Brocade#

Syntax: show aaa

The following table describes the TACACS or TACACS+ information displayed by the show aaa
command.

TABLE 5

Output of the show aaa command for TACACS or TACACS+

Field

Description

Tacacs+ key

The setting configured with the tacacs-server key command. At the Super User privilege
level, the actual text of the key is displayed. At the other privilege levels, a string of periods
(....) is displayed instead of the text.

Tacacs+ retries

The setting configured with the tacacs-server retransmit command.

Tacacs+ timeout

The setting configured with the tacacs-server timeout command.

Tacacs+ dead-time

The setting configured with the tacacs-server dead-time command.

Tacacs+ Server

For each TACACS or TACACS+ server, the IP address, port, and the following statistics are
displayed:
opens – Number of times the port was opened for communication with the server
closes – Number of times the port was closed normally
timeouts – Number of times port was closed due to a timeout
errors – Number of times an error occurred while opening the port
packets in – Number of packets received from the server
packets out – Number of packets sent to the server

connection

The current connection status. This can be “no connection” or “connection active”.

Advertising