Connectivity Guide

Usage
Information
Use this command to associate TACACS servers with a VRF instance. If you do not configure a VRF
in the TACACS server list, the servers are on the default VRF instance. TACACS server lists and VRFs
have one-to-one mapping. When you remove the VRF instance, the TACACS server lists are also removed
automatically.
The no version of this command resets the value to the default.
Example
[no] tacacs-server management
[no] tacacs-server vrf red
Supported
Releases
10.4.3.0E or later
username password role
Creates an authentication entry based on a user name and password, and assigns a role to the user.
Syntax
username username password password role role [ priv-lvl privilege-level]
Parameters
● username username—Enter a text string. A maximum of 32 alphanumeric characters; one
character minimum.
● password password—Enter a text string. A maximum of 32 alphanumeric characters; nine
characters minimum.
● role role—Enter a user role:
○ sysadmin—Full access to all commands in the system, exclusive access to commands that
manipulate the file system, and access to the system shell. A system administrator can create user
IDs and user roles.
○ secadmin—Full access to configuration commands that set security policy and system access,
such as password strength, AAA authorization, and cryptographic keys. A security administrator
can display security information, such as cryptographic keys, login statistics, and log information.
○ netadmin—Full access to configuration commands that manage traffic flowing through the
switch, such as routes, interfaces, and ACLs. A network administrator cannot access configuration
commands for security features or view security information.
○ netoperator—Access to EXEC mode to view the current configuration. A network operator
cannot modify any configuration setting on a switch.
● priv-lvl privilege-level—Enter a privilege level, from 0 to 15. If you do not specify the
priv-lvl option, the system assigns privilege level 1 for the netoperator user and privilege level
15 for the sysadmin, secadmin, and netadmin users.
Default
● User name and password entries are in clear text.
● There is no default user role.
Command Mode CONFIGURATION
Usage
Information
● By default, the password must be at least nine alphanumeric characters. Only the following special
characters are supported:
! # % & ' ( ) ; < = > [ ] * + - . / : ^ _
Enter the password in clear text. It is converted to SHA-512 format in the running configuration. For
backward compatibility with OS10 releases 10.3.1E and earlier, passwords entered in MD-5, SHA-256,
and SHA-512 format are supported.
● To increase the required password strength, use the password-attributes command.
● You cannot assign a privilege level higher than privilege level 1 to a user with the netoperator role
and below and privilege level 2 for a sysadmin, secadmin, and netadmin roles.
● The no version of this command deletes authentication for a user.
Example
OS10(config)# username user05 password newpwd404 role sysadmin
OS10(config)# username user07 password paSsw0$d role netadmin priv-lvl 10
Security 787