Enabling Tacacs+ Authentication - Cisco WS-C4003 - Catalyst 4000 Chassis Switch Software Configuration Manual

Configuring Authentication
Enable Authentication: Console Session
---------------------- ----------------- ----------------
tacacs
radius
local
Tacacs key:
Tacacs login attempts: 3
Tacacs timeout: 5 seconds
Tacacs direct request: disabled
Tacacs-Server
----------------------------------------
172.20.52.3
172.20.52.2
172.20.52.10
Console> (enable)

Enabling TACACS+ Authentication

Note Specify at least one TACACS+ server before enabling TACACS+ authentication on the switch. For
information on specifying a TACACS+ server, see the
page
You can enable TACACS+ authentication for login and enable access to the switch. If desired, you can
use the console and telnet keywords to specify that TACACS+ authentication be used only on console
or Telnet connections. If you are using both RADIUS and TACACS+, you can use the primary keyword
to force the switch to try TACACS+ authentication first.
To enable TACACS+ authentication, perform this task in privileged mode:
Task
Step 1 Enable TACACS+ authentication for normal login
mode. Use the console or telnet keywords if you
want to enable TACACS+ only for console port or
Telnet connection attempts.
Step 2
Enable TACACS+ authentication for enable
mode. Use the console or telnet keywords if you
want to enable TACACS+ only for console port or
Telnet connection attempts.
Step 3
Verify the TACACS+ configuration.
This example shows how to enable TACACS+ authentication for console and Telnet connections and
how to verify the configuration:
Console> (enable) set authentication login tacacs enable
tacacs login authentication set to enable for console and telnet session.
Console> (enable) set authentication enable tacacs enable
tacacs enable authentication set to enable for console and telnet session.
Console> (enable) show authentication
Login Authentication:
---------------------
Software Configuration Guide—Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4
27-18
disabled
disabled
enabled(primary)
27-17.
Console Session
----------------
Chapter 27 Configuring Switch Access Using AAA
Telnet Session
disabled
disabled
enabled(primary)
Status
-------
primary
"Specifying TACACS+ Servers" section on
Command
set authentication login tacacs enable [all |
console | http | telnet] [primary]
set authentication enable tacacs enable [all |
console | http | telnet] [primary]
show authentication
Telnet Session
----------------
78-12647-02