Specifications

clear tacacs session Configuring TACACS+
Enterasys Matrix N Standalone (NSA) Series Configuration Guide 25-69
Mode
Switchcommand,ReadWrite.
Usage
Whensessionaccountingisenabled,theTACACS+serverwilllogaccountinginformation,suchas
startandstoptimes,IPaddressoftheclient,andsoforth,foreachauthorizedclientsession.
WhentheTACACS+clientisenabledontheEnterasysMatrixswitch(withthesettacacsenable
command),thesessionauthorization
parametersconfiguredwiththiscommandaresentbythe
clienttotheTACACS+serverwhenasessionisinitiatedontheEnterasysMatrixswitch.The
parametervaluesmustmatchaserviceandaccesslevelattributevaluepairsconfiguredonthe
serverforthesessiontobeauthorized.Iftheparametervalues
donotmatch,thesessionwillnot
beallowed.
Theservicenameandattributevaluepairscanbeanycharacterstring,andaredeterminedby
yourTACACS+serverconfiguration.
Examples
ThisexampleconfigurestheservicerequestedbytheTACACS+clientastheservicename“basic.”
Matrix(rw)->set tacacs session authorization service basic
ThisexamplemapstheMatrixreadwriteaccessprivilegeleveltoanattributenamed“privlvl”
withthevalueof5configuredontheTACACS+server.
Matrix(rw)->set tacacs session authorization read-write priv-lvl 5
ThisexampleenablesTACACS+sessi onaccounting.
Matrix(rw)->set tacacs session accounting enable
clear tacacs session
UsethiscommandtoreturntheTACACS+sessionauthorizationsettingstotheirdefaultvalues.
Syntax
clear tacacs session authorization { [service] [read-only] [read-write] [super-
user] }
Parameters
authorization ClearstheTACACS+sessionauthorizationparameters.
service ClearstheTACACS+sessionauthorizationservicenametothedefault
valueof“exec.”
readonly ClearstheTACACS+sessionauthorizationreadonlyattributevalue
pairtotheirdefaultvaluesof“privlvl”and0.
readwrite ClearstheTACACS+sessionauthorizationreadwriteattributevalue
pairtotheirdefaultvaluesof“privlvl”and1.
superuser ClearstheTACACS+sessionauthorizationsuperuserattributevalue
pairtotheirdefaultvaluesof“privlvl”and15.