Specifications

Chapter 4 Managing GSS User Accounts Through a TACACS+ Server
Disabling TACACS+ on a GSS
4-28
Cisco Global Site Selector Administration Guide
OL-5480-01
Disabling TACACS+ on a GSS
As GSS administrator, if you accidentally lock yourself out of a GSS device and
are unable to receive TACACS+ user authentication or authorization to access that
device, you can disable the TACACS+ function on that GSS from the CLI. You
must have physical access to the GSS device to perform this procedure.
To disable TACACS+ on a GSS device:
1. Attach an ASCII terminal to the Console port on the GSS device. Refer to the
Cisco Global Site Selector Hardware Installation Guide for instructions on
connecting a console cable to your Cisco Global Site Selector series
hardware.
2. Press the power control button on the GSS to cycle power to the device and
perform a restart. As the GSS reboots, output appears on the console terminal.
3. After the BIOS boots and the LILO boot: prompt appears, type the following
to disable TACACS+ for the GSS device:
LILO: <Tab>
GSS-1.21
LILO:GSS-1.21 DISABLETACACS=1
During the boot process the following appears:
Mounting other Filesystems: [ OK ]
*** Disabling TACACS Authentication and Authorization
Building Properties
You should now be able to locally access the GSS device and reconfigure the
TACACS+ authentication and authorization functions for the GSS device.
4. Save your configuration changes to memory
gssm1.example.com# copy running-config startup-config
If you fail to save your configuration changes, the GSS device reverts to its
previous settings upon a reboot, which include the previous TACACS+
configuration.