[no] tacplus
config>system>security
Supported on all 7210 SAS platforms as described in this document
Commands in this context configure TACACS+ authentication on the router.
Configure multiple server addresses for each router for redundancy.
The no form of this command removes the TACACS+ configuration.
accounting [record-type {start-stop | stop-only}]
no accounting
config>system>security>tacplus
Supported on all 7210 SAS platforms as described in this document
This command configures the type of accounting record packet that is to be sent to the TACACS+ server. The record-type parameter indicates whether TACACS+ accounting start and stop packets be sent or just stop packets be sent.
record-type stop-only
Specifies that a TACACS+ start packet is sent whenever the user executes a command.
Specifies that a stop packet is sent whenever the command execution is complete.
[no] authorization
config>system>security>tacplus
Supported on all 7210 SAS platforms as described in this document
This command configures TACACS+ authorization parameters for the system.
no authorization
server index address ip-address secret key [hash | hash2]
no server index
config>system>security>tacplus
Supported on all 7210 SAS platforms as described in this document
This command adds a TACACS+ server and configures the TACACS+ server IP address, index, and key values.
Up to five TACACS+ servers can be configured at any one time. TACACS+ servers are accessed in order from lowest index to the highest index for authentication requests.
The 7210 SAS-K 2F1C2T does not support IPv6 addresses for TACACS+ servers.
The no form of the command removes the server from the configuration.
Specifies the index for the TACACS+ server. The index determines the sequence in which the servers are queried for authentication requests. Servers are queried in order from the lowest index to the highest index.
Specifies the IP address of the TACACS+ server. Two TACACS+ servers cannot have the same IP address. An error message is generated if the server address is a duplicate.
Specifies the secret key, up to 128 characters, to access the RADIUS server. This secret key must match the password on the RADIUS server.
Specifies the key is entered in an encrypted form. If the hash parameter is not used, the key is assumed to be in a non-encrypted, clear text form. For security, all keys are stored in encrypted form in the configuration file with the hash parameter specified.
Specifies the key is entered in a more complex encrypted form. If the hash2 parameter is not used, the less encrypted hash form is assumed.
[no] shutdown
config>system>security>tacplus
Supported on all 7210 SAS platforms as described in this document
This command administratively disables the TACACS+ protocol operation. Shutting down the protocol does not remove or change the configuration other than the administrative state.
The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.
The no form of this command administratively enables the protocol.
no shutdown
timeout seconds
no timeout
config>system>security>tacplus
Supported on all 7210 SAS platforms as described in this document
This command configures the number of seconds the router waits for a response from a TACACS+ server.
The no form of the command reverts to the default value.
timeout 3
Specifies the number of seconds the router waits for a response from a TACACS+ server, expressed as a decimal integer.
[no] shutdown
config>system>security>tacplus
Supported on all 7210 SAS platforms as described in this document
This command administratively disables the TACACS+ protocol operation. Shutting down the protocol does not remove or change the configuration other than the administrative state.
The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.
The no form of this command administratively enables the protocol which is the default state.
no shutdown
[no] use-default-template
config>system>security>tacplus
Supported on all 7210 SAS platforms as described in this document
This command specifies whether the user template defined by this entry is to be actively applied to the TACACS+ user.