Dell PowerConnect B-FCXs, Configuration Manual

Page: 1207 / 1494

PowerConnect B-Series FCX Configuration Guide 1165
53-1002266-01
Configuring TACACS/ security
32
Configuring TACACS/ for devices in a Dell IronStack
Because devices operating in a Dell IronStack topology present multiple console ports, you must
take additional steps to secure these ports when configuring TACACS/.
The following is a sample AAA console configuration using .
aaa authentication login default enable
aaa authentication login privilege-mode
aaa authorization commands 0 default
aaa authorization exec default
aaa accounting commands 0 default start-stop
aaa accounting exec default start-stop
aaa accounting system default start-stop
enable aaa console
hostname Fred
ip address 144.10.6.56/255
tacacs-server host 255.253.255
tacacs-server key 1 $Gsig@U\
kill console
Syntax: kill console [all | unit]
•
all - logs out all console port on stack units that are not the Active Controller
•
unit - logs out the console port on a specified unit
Once AAA console is enabled, you should log out any open console ports on your IronStack using
the kill console command:
PowerConnecth(config)#kill console all
In case a user forgets to log out or a console is left unattended, you can also configure the console
timeout (in minutes) on all stack units (including the Active Controller).
PowerConnect(config)#stack unit 3
PowerConnect(config-unit-3)#console timeout 5
PowerConnect(config-unit-3)#exit
PowerConnect(config)#stack unit 4
PowerConnect(config-unit-4)#console timeout 5
Use the show who and the show telnet commands to confirm the status of console sessions.
stack9#show who
Console connections (by unit number):
1 established
you are connecting to this session
4 seconds in idle
2 established
1 hours 3 minutes 12 seconds in idle
3 established
1 hours 3 minutes 9 seconds in idle
4 established
1 hours 3 minutes 3 seconds in idle
Telnet connections (inbound):
1 closed
2 closed
3 closed
4 closed
5 closed
Telnet connection (outbound):