Cisco SCE8000 Configuration Manual page 78

Configuring the Available Interfaces
Configuring the SCE Platform TACACS+ Client
The user must configure the remote servers for the TACACS+ protocol. Then the SCE platform
TACACS+ client must be configured to work with the TACACS+ servers. The following information
must be configured:
TACACS+ server hosts definition — a maximum of three servers is supported.
•
For each sever host, the following information can be configured:
–
–
–
–
Default encryption key (optional) — A global default encryption key may be defined. This key is
•
defined as the key for any server host for which a key is not explicitly configured when the server
host is defined.
If the default encryption key is not configured, a default of no key is assigned to any server for which
a key is not explicitly configured.
Default timeout interval (optional) — A global default timeout interval may be defined. This timeout
•
interval is defined as the timeout interval for any server host for which a timeout interval is not
explicitly configured when the server host is defined.
If the default timeout interval is not configured, a default of five seconds is assigned to any server
for which a timeout interval is not explicitly configured.
The procedures for configuring the SCE platform TACACS+ client are explained in the following
sections:
How to Add a New TACACS+ Server Host, page 5-10
•
How to Remove a TACACS+ Server Host, page 5-11
•
How to Configure the Global Default Key, page 5-11
•
How to Configure the Global Default Timeout, page 5-12
•
How to Add a New TACACS+ Server Host
Use this command to define a new TACACS+ server host that is available to the SCE platform TACACS+
client.
The Service Control solution supports a maximum of three TACACS+ server hosts.
Options
The following options are available:
• host-name — name of the server
• port number — TACACS+ port number
–
timeout interval — time in seconds that the server waits for a reply from the server host before
•
timing out
–
Cisco SCE8000 Software Configuration Guide, Rel 3.1.6S
5-10
hostname (required)
port
encryption key
timeout interval
Default = 49
Default = 5 seconds or user-configured global default timeout interval (See
Global Default Timeout, page
Chapter 5 Configuring the Management Interface and Security
5-12.)
How to Define the
OL-16479-01