clear tacacs session Configuring TACACS+
Enterasys Matrix DFE-Gold Series Configuration Guide 25-69
Mode
Switchcommand,ReadWrite.
Usage
Whensessionaccountingisenabled,theTACACS+serverwilllogaccountinginformation,suchas
startandstoptimes,IPaddressoftheclient,andsoforth,foreachauthorizedclientsession.
WhentheTACACS+clientisenabledontheEnterasysMatrixswitch(withthesettacacsenable
command),thesessionauthorizationparametersconfiguredwiththiscommandaresentbythe
clienttotheTACACS+serverwhenasessionisinitiatedontheEnterasysMatrixswitch.The
parametervaluesmustmatchaserviceandaccesslevelattributevaluepairsconfiguredonthe
serverforthesessiontobeauthorized.Iftheparametervaluesdonotmatch,thesessionwillnot
beallowed.
Theservicenameandattributevaluepairscanbeanycharacterstring,andaredeterminedby
yourTACACS+serverconfiguration.
Examples
ThisexampleconfigurestheservicerequestedbytheTACACS+clientastheservicename“basic.”
Matrix(rw)->set tacacs session authorization service basic
ThisexamplemapstheMatrixreadwriteaccessprivilegeleveltoanattributenamed“privlvl”
withthevalueof5configuredontheTACACS+server.
Matrix(rw)->set tacacs session authorization read-write priv-lvl 5
ThisexampleenablesTACACS+sessionaccounting.
Matrix(rw)->set tacacs session accounting enable

clear tacacs session

UsethiscommandtoreturntheTACACS+sessionauthorizationsettingstotheirdefaultvalues.
Syntax
clear tacacs session authorization { [service] [read-only] [read-write] [super-
user] }
Parameters
authorizationClearstheTACACS+sessionauthorizationparameters.
serviceClearstheTACACS+sessionauthorizationservicenametothedefault
valueof“exec.”
readonly ClearstheTACACS+sessionauthorizationreadonlyattributevalue
pairtotheirdefaultvaluesof“privlvl”and0.
readwrite ClearstheTACACS+sessionauthorizationreadwriteattributevalue
pairtotheirdefaultvaluesof“privlvl”and1.
superuser ClearstheTACACS+sessionauthorizationsuperuserattributevalue
pairtotheirdefaultvaluesof“privlvl”and15.