Configuring TACACS

Server Level Configurations

You can configure the TACACS Server using the following command:

Reference

Command

[no] tacacs-server host <ipv4 | ipv6> [timeout<value> ] [key <value> ] [auth_type (chap |

pap | mschap | login) ] [port <value>] [priority <value> ]

Description

TACACS configuration

Parameters

IPv4 or v6 Address , timeout, key, auth_type, port, priority values

Mode

CONFIG

Example

 pbnoscli(config)# tacacs-server host 10.0.0.1           
  <cr>
  auth_type             Authentication type, default pap
  key                   Add Key
  port                  TCP port range is <1...65535>, default 49
  priority              Priority <1..64>, default 1
  timeout               Transmission timeout interval <0-60>, default 5
pbnoscli(config)# tacacs-server host 10.0.0.1 auth_type 
  chap                  chap
  login                 login
  mschap                mschap
  pap                   pap
pbnoscli(config)# tacacs-server host 10.0.0.1 auth_type pap key key_val port 44 priority 1 timeout 60
pbnoscli(config)#

You can verify the configuration by using the command(s) below:

Global TACACS Parameters

To Configure Global TACACS parameters, use the below command:

Reference

Command

[no] tacacs [authtype (chap | pap | mschap | login)] [passkey <value>] [timeout <value>]

Description

TACACS global configuration

Parameters

Timeout, key, auth_type, passkey values

Mode

CONFIG

Example

You can verify the configuration by using the command(s) below:

PreviousConfiguring AAANextConfiguring RADIUS

Last updated