SNR S2989G-8TX — настройка TACACS+ для аутентификации на сетевых устройствах [327/553]

Превью страниц Страница 327 / 553

S2989G-24TX Operation Manual

Chapter 6 Security Function Configuration

6-54

3. Configure the TACACS+ authentication timeout time

Command

Explanation

Global Mode

tacacs-server timeout <seconds>

no tacacs-server timeout

Configure the authentication timeout for

the TACACS+ server, the “no tacacs-

server timeout” command restores the

default configuration.

4. Configure the IP address of the TACACS+ NAS

Command

Explanation

Global Mode

tacacs-server nas-ipv4 <ip-address>

no tacacs-server nas-ipv4

To configure the source IP address for

the TACACS+ packets for the switch.

6.5.3

TACACS+ Scenarios Typical Examples

10.1.1.2

10.1.1.1 Tacacs Server

10.1.1.3

Figure 6-20 TACACS Configuration

A computer connects to a switch, of which the IP address is 10.1.1.2 and connected

with a TACACS+ authentication server; IP address of the server is 10.1.1.3 and the

authentication port is defaulted at 49, set telnet log on authentication of the switch as

tacacs local, via using TACACS+ authentication server to achieve telnet user

authentication.

Switch(config)#interface vlan 1

Switch(Config-if-vlan1)#ip address 10.1.1.2 255.255.255.0

Switch(Config-if-vlan1)#exit

Switch(config)#tacacs-server authentication host 10.1.1.3

Switch(config)#tacacs-server key test