Owner's Manual
470 | Chapter 17. Security
NETGEAR 8800 User Manual
Enabling and Disabling TACACS+ Accounting
After you configure the TACACS+ client with the TACACS+ accounting server information,
you must enable accounting in the TACACS+ client before the switch begins transmitting the
information. You must enable TACACS+ authentication in the client for accounting
information to be generated. You can enable and disable accounting without affecting the
current state of TACACS+ authentication.
To enable TACACS+ accounting, use the following command:
enable tacacs-accounting
To disable TACACS+ accounting, use the following command:
disable tacacs-accounting
TACACS+ Accounting Configuration Example
This section provides a sample TACACS+ client configuration for TACACS+ accounting.
The following example:
• Specifies the primary TACACS+ accounting server
• Specifies the shared secret for the primary TACACS+ accounting server
• Specifies the secondary TACACS+ accounting server
• Specifies the shared secret for the secondary TACACS+ accounting server
• Enables TACACS+ accounting on the switch
All other client configuration features use the default settings as described earlier in this
section or in the NETGEAR 8800 Chassis Switch CLI Manual.
configure tacacs-accounting primary server 10.201.31.238 client-ip 10.201.31.85 vr
"VR-Default"
configure tacacs-accounting primary shared-secret purple
configure tacacs-accounting secondary server 10.201.31.235 client-ip 10.201.31.85 vr
"VR-Default"
config tacacs-accounting secondary shared-secret purple
enable tacacs-accounting
To display the TACACS+ client accounting configuration, use the show tacacs or the show
tacacs-accounting
command. The following is sample output from the show tacacs
command:
TACACS+: enabled
TACACS+ Authorization: enabled
TACACS+ Accounting : enabled
TACACS+ Server Connect Timeout sec: 3
Primary TACACS+ Server:
Server name :
IP address : 10.201.31.238
Server IP Port: 49
Client address: 10.201.31.85 (VR-Default)
Shared secret : purple
Secondary TACACS+ Server: