Setting Options For Tacacs - Cisco 2509 - Router - EN User Manual

Chapter 3 Setting Up the Cisco Secure ACS HTML Interface
Note

Setting Options for TACACS+

Note
Step 1
78-14696-01, Version 3.1
You can use this feature to send many TACACS+ commands to the access
device for the service, provided that the device supports the command,
and that the command syntax is correct. This feature is disabled by
default, but you can enable it the same way you enable attributes and
time-of-day access.
Display enable Default (Undefined) Service Configuration—If this
–
check box is selected, an area appears on the User Setup and Group Setup
pages that enables you to permit unknown TACACS+ services, such as
Cisco Discovery Protocol (CDP).
This option should be used by advanced system administrators
Note
only.
Customized settings at the user level take precedence over settings at the group
level.
This procedure enables you to display or hide TACACS+ administrative and
accounting options. It is unlikely that you will use every service and protocol
available for TACACS+. Displaying each would make setting up a user or group
cumbersome. To simplify setup, you can use the TACACS+ (Cisco IOS) Edit page
to customize the services and protocols that appear.
To configure the user interface for TACACS+ options, follow these steps:
The Cisco Secure ACS HTML interface displays any protocol option that is
enabled or has non-default values, even if you have configured that protocol
option to be hidden. If you later disable the option or delete its value and the
protocol option is configured to be hidden, Cisco Secure ACS hides the protocol
option. This behavior prevents Cisco Secure ACS from hiding active settings.
Click Interface Configuration, and then click TACACS+ (Cisco IOS).
Result: The TACACS+ (Cisco) page appears.
Protocol Configuration Options for TACACS+
User Guide for Cisco Secure ACS for Windows Server
3-9