config user tacacs+
Configure TACACS+ server entries.
config user tacacs+
Description: Configure TACACS+ server entries.
edit <name>
set server {string}
set secondary-server {string}
set tertiary-server {string}
set port {integer}
set key {password}
set secondary-key {password}
set tertiary-key {password}
set authen-type [mschap|chap|...]
set authorization [enable|disable]
set source-ip {string}
set interface-select-method [auto|sdwan|...]
set interface {string}
next
end
config user tacacs+
Parameter name |
Description |
Type |
Size |
||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
server |
Primary TACACS+ server CN domain name or IP address. |
string |
Maximum length: 63 |
||||||||||||
secondary-server |
Secondary TACACS+ server CN domain name or IP address. |
string |
Maximum length: 63 |
||||||||||||
tertiary-server |
Tertiary TACACS+ server CN domain name or IP address. |
string |
Maximum length: 63 |
||||||||||||
port |
Port number of the TACACS+ server. |
integer |
Minimum value: 1 Maximum value: 65535 |
||||||||||||
key |
Key to access the primary server. |
password |
Not Specified |
||||||||||||
secondary-key |
Key to access the secondary server. |
password |
Not Specified |
||||||||||||
tertiary-key |
Key to access the tertiary server. |
password |
Not Specified |
||||||||||||
authen-type |
Allowed authentication protocols/methods. |
option |
- |
||||||||||||
|
|
||||||||||||||
authorization |
Enable/disable TACACS+ authorization. |
option |
- |
||||||||||||
|
|
||||||||||||||
source-ip |
source IP for communications to TACACS+ server. |
string |
Maximum length: 63 |
||||||||||||
interface-select-method |
Specify how to select outgoing interface to reach server. |
option |
- |
||||||||||||
|
|
||||||||||||||
interface |
Specify outgoing interface to reach server. |
string |
Maximum length: 15 |