Install guide
Software Release 2.6.4 29
Software Release 2.6.4
C613-10404-00 REV A
Table 6: Examples of syslog messages with syslogformat=normal
Table 7: Examples of syslog messages with syslogformat= extended
To set the system name to a unique identifier, use the command set system
name.
TACACS+ Authentication and Telnet
If your login to the switch is authenticated using TACACS+, you can only use
outbound telnet if your TACACS+ privilege level is also equal to or higher than
the minimum TACACS+ privilege level required for using telnet on the device.
By default, no TACACS+ users can telnet from the switch. To set a privilege
level, use the command:
set tacplus telnet={0..15|none}
A value of none is the default and disables telnet for all TACACS+
authenticated users. A value of 1 indicates that all users can telnet. TACACS+
privilege levels of 1-6 correspond to User level privilege, privilege levels 7-14
are mapped to Manager, and privilege level 15 are mapped to Security Officer.
Therefore a value of 7-14 indicates that Manager privilege or better is required.
A value of 15 is equivalent to Security Officer privilege.
Note that a user can have a TACACS+ privilege level that is equivilent to User
or Manager but be unable to use telnet on the device if the TACACS+ privilege
level required for using telnet is higher than the privilege level they have been
assigned. For example, if the TACACS+ privilege level required for using telnet
is set to 10 and there are two users with Manager privileges, one with a
TACACS+ privilege level of 9 and one with a privilege level of 10, only the user
with a privilege level of 10 can use telnet on the device.
For example, to allow telnet for TACACS+ authenticated Security Officers, use
the command:
set tacplus telnet=15
To see the required privilege level, use the command:
show tacplus telnet
Figure 5: Example output from the show tacplus telnet command.
<12>SSH:SSH/ACPT, SSH connection accepted - pwduser
<14>CH:CMD/USER, logoff
<12>USER:USER/LOFF, pwduser logoff on TTY17
23-Oct-2003 16:39:37 <12>SSH:SSH/ACPT, Src: AR450 ,SSH connection accepted - pwduser
23-Oct-2003 16:39:41 <14>CH:CMD/USER, Src: AR450 ,logoff
23-Oct-2003 16:39:41 <12>USER:USER/LOFF, Src: AR450 ,pwduser logoff on TTY17
TACACS+ telnet privilege level: NONE