SGS-6341-Series User Manual

tacacs-server authentication host
<ip-address> [port <port-number>]
[timeout <seconds>] [key {0 | 7}
<string>] [primary]
no tacacs-server authentication host
<ip-address>
Configure the IP address, listening port
number, the value of timeout timer and the
key string of the TACACS+ server; the no
form of this command deletes the
TACACS+ authentication server.
3. Configure the TACACS+ authentication timeout time
Command Explanation
Global Mode
tacacs-server timeout <seconds>
no tacacs-server timeout
Configure the authentication timeout for the
TACACS+ server, the “no tacacs-server
timeout” command restores the default
configuration.
4. Configure the IP address of the TACACS+ NAS
Command Explanation
Global Mode
tacacs-server nas-ipv4 <ip-address>
no tacacs-server nas-ipv4
To configure the source IP address for the
TACACS+ packets for the switch.
46.3 TACACS+ Scenarios Typical Examples
10.1.1.2
10.1.1.1 TACACS Serve
r
10.1.1.3
Figure 46-1: TACACS Configuration
A computer connects to a switch, of which the IP address is 10.1.1.2 and connected with a
TACACS+ authentication server; IP address of the server is 10.1.1.3 and the authentication
port is defaulted at 49, set telnet log on authentication of the switch as tacacs local, via using
TACACS+ authentication server to achieve telnet user authentication.
46-107
User’s Manual of SGS-6341 series