Table of Contents
Advertisement
Configuring Security
Configuring TACACS+ Servers
STEP 3
STEP 4
STEP 5
Cisco 220 Series Smart Plus Switches Administration Guide Release 1.0.0.x
•
Key String—Enter the default key string used for communicating with all
TACACS+ servers in Encrypted or Plaintext mode. The switch can be
configured to use this key or to use a key for an individual server. If you do not
enter a key string in this field, the key the server key entered in the Add
TACACS+ server page must match the encryption key used by the
TACACS+ server. If you enter a key string here and a key string for an
individual TACACS+ server, the key string configured for the individual
TACACS+ server takes precedence.
•
Timeout for Reply—Enter the amount of time that passes before the
connection between the switch and the TACACS+ server times out. If a value
is not entered on the Add TACACS+ Server page for a specific server, the
value is taken from this field.
Click Apply. The TACACS+ default parameters are defined, and the Running
Configuration is updated.
Click Add to add a TACACS+ server.
Enter the following information:
•
Server Definition—Select whether to specify the TACACS+ server by IP
address or name.
•
IP Version—Select either Version 4 or Version 6 if the TACACS+ server is
identified by IP address.
•
Server IP Address/Name—Enter the IP address or host name of the
TACACS+ server.
•
Priority—Enter the order that this TACACS+ server is used. Zero is the
highest priority TACACS+ server and is the first server used. If it cannot
establish a session with the highest priority server, the switch will try the
next highest priority server.
•
Key String—A key string is used to encrypt communications by using MD5.
You can select Use Default to use the default key (defined under the
TACACS+ default parameters) on the switch, or you can select User Defined
(Encrypted) or User Defined (Plaintext) to enter the key in encrypted or
plaintext form. The key must match the encryption key configured on the
TACACS+ server. If you do not have an encrypted key string (from another
device), enter the key string in plaintext mode and click Apply. The
encrypted key string is generated and displayed.
•
Timeout for Reply—Select User Defined to manually enter the amount of
time that passes before the connection between the switch and the
TACACS+ server times out, or select Use Default to use the default value.
16
183
Advertisement
Table of Contents
