Administrator Guide

Usage
Information
In the example above, TACACS+ accounting is used to track all usage of EXEC command and commands
on privilege level 15. Privilege level 15 is the default. If you want to track usage at privilege level 1 for
example, use theaaa accounting command 1 command.
Supported Modes All Modes
Command
History
Version Description
9.5(0.0) Supported on the FN I/O Agregator and M I/O Aggregator.
Example
Dell(config)# aaa accounting exec default start-stop tacacs+
Dell(config)# aaa accounting command 15 default start-stop tacacs+
Dell(config)#
Related
Commands
enable password changes the password for the enable command.
login
authentication
enables AAA login authentication on the terminal lines.
password creates a password.
tacacs-server
host
specifies a TACACS+ server host.
tacacs-server host
Specify a TACACS+ host.
Syntax
tacacs-server host {hostname | ipv4-address | ipv6-address} [port number]
[timeout seconds] [key key]
Parameters
hostname Enter the name of the TACACS+ server host.
ipv4-address |
ipv6-address
Enter the IPv4 address (A.B.C.D) or IPv6 address (X:X:X:X::X) of the TACACS+
server host.
port number (OPTIONAL) Enter the keyword port then a number as the port to be used by the
TACACS+ server. The range is from zero (0) to 65535. The default is 49.
timeout seconds (OPTIONAL) Enter the keyword timeout then the number of seconds the switch
waits for a reply from the TACACS+ server. The range is from 0 to 1000. The
default is 10 seconds.
key key
(OPTIONAL) Enter the keyword key then a string up to 42 characters long as the
authentication key. This authentication key must match the key specified in the
tacacs-server key for the TACACS+ daemon.
Defaults Not configured.
Command Modes CONFIGURATION
Supported Modes All Modes
Command
History
Version Description
9.4(0.0) Supported on the FN I/O Aggregator.
9.3(0.0) Supported on the M I/O Aggregator.
Usage
Information
To list multiple TACACS+ servers to be used by the aaa authentication login command,
configure this command multiple times.
If you are not configuring the switch as a TACACS+ server, you do not need to configure the port,
timeout and key optional parameters. If you do not configure a key, the key assigned in the tacacs-
server key command is used.
Security 271