Extreme Networks 200 Series User Manual

Page 72

Advertising
background image

70

Summit 200 Series Switch Installation and User Guide

Managing the Switch

Table 20: TACACS+ Commands

Command

Description

config tacacs [primary | secondary] server
[<ipaddress> | <hostname>] {<udp_port>} client-ip
<ipaddress>

Configure the server information for a
TACACS+ server. Specify the following:

primary | secondary

— Specifies

primary or secondary server
configuration. To remove a server, use
the address 0.0.0.0.

<ipaddress> | <hostname>

Specifies the TACACS+ server.

<udp_port>

— Optionally specifies

the UDP port to be used.

client-ip

— Specifies the IP

address used by the switch to identify
itself when communicating with the
TACACS+ server.

config tacacs [primary | secondary] shared-secret
{encrypted} <string>

Configures the shared secret string used
to communicate with the TACACS+ server.

config tacacs-accounting [primary | secondary]
server [<ipaddress> | <hostname>] {<udp_port>}
client-ip <ipaddress>

Configures the TACACS+ accounting
server. You can use the same server for
accounting and authentication.

config tacacs-accounting [primary | secondary]
shared-secret {encrypted} <string>

Configures the shared secret string used
to communicate with the TACACS+
accounting server.

disable tacacs

Disables TACACS+.

disable tacacs-accounting

Disables TACACS+ accounting.

disable tacacs-authorization

Disables CLI command authorization.

enable tacacs

Enables TACACS+. Once enabled, all CLI
logins are sent to one of the two
TACACS+ server for login name
authentication and accounting.

enable tacacs-accounting

Enables TACACS+ accounting. If
accounting is use, the TACACS+ client
must also be enabled.

enable tacacs-authorization

Enables CLI command authorization.
When enabled, each command is
transmitted to the remote TACACS+
server for authorization before the
command is executed.

show tacacs

Displays the current TACACS+
configuration and statistics.

show tacacs-accounting

Displays the current TACACS+ accounting
client configuration and statistics.

unconfig tacacs {server [primary | secondary]}

Unconfigures the TACACS+ client
configuration.

unconfig tacacs-accounting {server [primary |
secondary]}

Unconfigures the TACACS+ accounting
client configuration.

Advertising