The commands erase settings for the primary and secondary servers and secret
key, and restore default port settings.
Enabling remote services
About this task
To enable to provide services to remote users over serial or Telnet connections,
use the following commands in Global or Interface Configuration mode.
For serial connections:
cli password serial tacacs
For Telnet connections:
cli password telnet tacacs
You must configure a server on the switch before you can enable remote TACACS
+ services. For more information about configuring the primary server and shared
secret, see “Configuring server settings” (page 159).
Enabling authorization
About this task
To enable authorization globally on the switch, use the following command in Global
or Interface Configuration mode:
tacacs authorization enable
To disable authorization globally on the switch, use the following command in
Global or Interface Configuration mode:
tacacs authorization disable
The default is disabled.
Setting authorization privilege levels
The preconfigured privilege levels control which commands can be executed. If a user has
been assigned a privilege level for which authorization has been enabled,
authorizes the authenticated user to execute a specific command only if the command is
allowed for that privilege level.
To specify the privilege levels to which authorization applies, use the following command in
Global or Interface Configuration mode:
tacacs authorization level all|<level>|none
The following table describes the parameters for this command.
Table 68: tacas authorization command parameters
Parameter
Description
all
Authorization is enabled for all privilege levels.
ACLI Reference for wired networks
224 Avaya WLAN 8100 CLI Reference
August 2013