PLANET XGS3-24042 - Manual (Page 1001)

51-3
Global Mode
Usage Guide:
The source IP address must belongs to one of the IP interface of the switch, otherwise an failure
message of binding IP address will be returned when the switch send TACACS+ packet. We
suggest using the IP address of loopback interface as source IP address, it avoids that the packets
from TACACS+ server are dropped when the interface link-down.
Example:
Configure the source ip address of TACACS+ packet as 192.168.2.254.
Switch#tacacs-server nas-ipv4 192.168.2.254
51.4 tacacs-server timeout
Command:
tacacs-server timeout <seconds>
no tacacs-server timeout
Function:
Configure a TACACS+ server authentication timeout timer; the “no tacacs-server timeout”
command restores the default configuration.
Parameter:
<seconds> is the value of TACACS+ authentication timeout timer, shown in seconds and the valid
range is 1~60.
Command Mode:
Global Mode
Default:
3 seconds by default.
Usage Guide:
The command specifies the period the switch wait for the authentication through TACACS+ server.
When connected to the TACACS+, and after sent the authentication query data packet to the
TACACS+ server, the switch waits for the response. If no replay is received during specified period,
the authentication is considered failed.
Example:
Configure the timeout timer of the tacacs+ server to 30 seconds.
Switch(config)#tacacs-server timeout 30