server index address ip-address secret key [hash | hash2] [port port]
no server index
config>system>security>tacplus
Supported on all 7210 SAS platforms as described in this document, including those configured in the access-uplink operating mode.
This command adds a TACACS+ server and configures the TACACS+ server IP address, index, and key values.
Up to five TACACS+ servers can be configured at any one time. TACACS+ servers are accessed in order from lowest index to the highest index for authentication requests.
The no form of this command removes the server from the configuration.
Specifies the index for the TACACS+ server. The index determines the sequence in which the servers are queried for authentication requests. Servers are queried in order from the lowest index to the highest index.
Specifies the IP address of the TACACS+ server. Two TACACS+ servers cannot have the same IP address. An error message is generated if the server address is a duplicate.
Specifies the secret key to access the RADIUS server, up to 128 characters. This secret key must match the password on the RADIUS server.
Specifies that the key is entered in an encrypted form. If the hash parameter is not used, the key is assumed to be in a non-encrypted, clear text form. For security, all keys are stored in encrypted form in the configuration file with the hash parameter specified.
Specifies that the key is entered in a more complex encrypted form. If the hash2 parameter is not used, the less encrypted hash form is assumed.
[no] tacplus
config>system>security
Supported on all 7210 SAS platforms as described in this document, including those configured in the access-uplink operating mode.
This command creates the context to configure TACACS+ authentication on the router.
Configure multiple server addresses for each router for redundancy.
The no form of this command removes the TACACS+ configuration.
accounting [record-type {start-stop | stop-only}]
no accounting
config>system>security>tacplus
Supported on all 7210 SAS platforms as described in this document, including those configured in the access-uplink operating mode.
This command configures the type of accounting record packet to be sent to the TACACS+ server. The record-type parameter indicates whether TACACS+ accounting start and stop packets be sent or just stop packets be sent.
record-type stop-only
Specifies that a TACACS+ start packet is sent whenever the user executes a command.
Specifies that a stop packet is sent whenever the command execution is complete.
[no] authorization
config>system>security>tacplus
Supported on all 7210 SAS platforms as described in this document, including those configured in the access-uplink operating mode.
This command configures TACACS+ authorization parameters for the system.
no authorization
timeout seconds
no timeout
config>system>security>tacplus
Supported on all 7210 SAS platforms as described in this document, including those configured in the access-uplink operating mode.
This command configures the number of seconds the router waits for a response from a TACACS+ server.
The no form of this command reverts to the default value.
timeout 3
Specifies the number of seconds the router waits for a response from a TACACS+ server, expressed as a decimal integer.
[no] shutdown
config>system>security>tacplus
Supported on all 7210 SAS platforms as described in this document, including those configured in the access-uplink operating mode.
This command administratively disables the TACACS+ protocol operation. Shutting down the protocol does not remove or change the configuration other than the administrative state.
The operational state of the entity is disabled as well as the operational state of any entities contained within. Many objects must be shut down before they may be deleted.
The no form of this command administratively enables the protocol which is the default state.
no shutdown
[no] use-default-template
config>system>security>tacplus
Supported on all 7210 SAS platforms as described in this document, including those configured in the access-uplink operating mode.
This command specifies whether or not the user template defined by this entry is to be actively applied to the TACACS+ user.