Chapter 25 AAA

The following table describes the labels in this screen.

Table 70 Advanced Application > AAA > TACACS+ Server Setup

LABEL

DESCRIPTION

Authentication

Use this section to configure your TACACS+ authentication settings.

Server

 

 

 

Mode

This field is only valid if you configure multiple TACACS+ servers.

 

Select index-priorityand the Switch tries to authenticate with the first

 

configured TACACS+ server, if the TACACS+ server does not respond

 

then the Switch tries to authenticate with the second TACACS+ server.

 

Select round-robinto alternate between the TACACS+ servers that it

 

sends authentication requests to.

 

 

Timeout

Specify the amount of time in seconds that the Switch waits for an

 

authentication request response from the TACACS+ server.

 

If you are using index-priorityfor your authentication and you are

 

using two TACACS+ servers then the timeout value is divided between

 

the two TACACS+ servers. For example, if you set the timeout value to

 

30 seconds, then the Switch waits for a response from the first TACACS+

 

server for 15 seconds and then tries the second TACACS+ server.

 

 

Index

This is a read-only number representing a TACACS+ server entry.

 

 

IP Address

Enter the IP address of an external TACACS+ server in dotted decimal

 

notation.

 

 

TCP Port

The default port of a TACACS+ server for authentication is 49. You need

 

not change this value unless your network administrator instructs you to

 

do so.

 

 

Shared Secret

Specify a password (up to 32 alphanumeric characters) as the key to be

 

shared between the external TACACS+ server and the Switch. This key is

 

not sent over the network. This key must be the same on the external

 

TACACS+ server and the Switch.

 

 

Delete

Check this box if you want to remove an existing TACACS+ server entry

 

from the Switch. This entry is deleted when you click Apply.

 

 

Apply

Click Apply to save your changes to the Switch’s run-time memory. The

 

Switch loses these changes if it is turned off or loses power, so use the

 

Save link on the top navigation panel to save your changes to the non-

 

volatile memory when you are done configuring.

 

 

Cancel

Click Cancel to begin configuring this screen afresh.

 

 

Accounting

Use this section to configure your TACACS+ accounting settings.

Server

 

 

 

Timeout

Specify the amount of time in seconds that the Switch waits for an

 

accounting request response from the TACACS+ server.

 

 

Index

This is a read-only number representing a TACACS+ accounting server

 

entry.

 

 

IP Address

Enter the IP address of an external TACACS+ accounting server in dotted

 

decimal notation.

 

 

TCP Port

The default port of a TACACS+ accounting server is 49. You need not

 

change this value unless your network administrator instructs you to do

 

so.

 

 

250

 

XGS4700-48F User’s Guide