config user tacacs+
Configure TACACS+ server entries.
config user tacacs+
Description: Configure TACACS+ server entries.
edit <name>
set server {string}
set secondary-server {string}
set tertiary-server {string}
set port {integer}
set key {password}
set secondary-key {password}
set tertiary-key {password}
set authen-type [mschap|chap|...]
set authorization [enable|disable]
set source-ip {string}
set interface-select-method [auto|sdwan|...]
set interface {string}
next
end
config user tacacs+
|
Parameter |
Description |
Type |
Size |
Default |
||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
server |
Primary TACACS+ server CN domain name or IP address. |
string |
Maximum length: 63 |
|
||||||||||||
|
secondary-server |
Secondary TACACS+ server CN domain name or IP address. |
string |
Maximum length: 63 |
|
||||||||||||
|
tertiary-server |
Tertiary TACACS+ server CN domain name or IP address. |
string |
Maximum length: 63 |
|
||||||||||||
|
port |
Port number of the TACACS+ server. |
integer |
Minimum value: 1 Maximum value: 65535 |
49 |
||||||||||||
|
key |
Key to access the primary server. |
password |
Not Specified |
|
||||||||||||
|
secondary-key |
Key to access the secondary server. |
password |
Not Specified |
|
||||||||||||
|
tertiary-key |
Key to access the tertiary server. |
password |
Not Specified |
|
||||||||||||
|
authen-type |
Allowed authentication protocols/methods. |
option |
- |
auto |
||||||||||||
|
|
|
|||||||||||||||
|
authorization |
Enable/disable TACACS+ authorization. |
option |
- |
disable |
||||||||||||
|
|
|
|||||||||||||||
|
source-ip |
Source IP address for communications to TACACS+ server. |
string |
Maximum length: 63 |
|
||||||||||||
|
interface-select-method |
Specify how to select outgoing interface to reach server. |
option |
- |
auto |
||||||||||||
|
|
|
|||||||||||||||
|
interface |
Specify outgoing interface to reach server. |
string |
Maximum length: 15 |
|
||||||||||||