Extreme Networks Summit Summit24, Installation And User Manual

Page: 61 / 244

Authenticating Users
Summit24e3 Switch Installation and User Guide 61
attempting to administer the switch. is used to communicate between the switch and an
authentication database.
NOTE
You cannot use RADIUS and at the same time.
You can configure two servers, specifying the primary server address, secondary server
address, and UDP port number to be used for sessions.
Table 16 describes the commands that are used to configure .
Table 16: Commands
Command Description
config tacacs [primary | secondary] server
[<ipaddress> | <hostname>] {<udp_port>} client-ip
<ipaddress> Configure the server information for a
server. Specify the following:
•
primary | secondary
— Specifies
primary or secondary server
configuration. To remove a server, use
the address 0.0.0.0.
•
<ipaddress> | <hostname>
—
Specifies the server.
•
<udp_port>
— Optionally specifies
the UDP port to be used.
•
client-ip
— Specifies the IP
address used by the switch to identify
itself when communicating with the
server.
config tacacs [primary | secondary] shared-secret
{encrypted} <string> Configures the shared secret string used
to communicate with the server.
config tacacs-accounting [primary | secondary]
server [<ipaddress> | <hostname>] {<udp_port>}
client-ip <ipaddress> Configures the accounting
server. You can use the same server for
accounting and authentication.
config tacacs-accounting [primary | secondary]
shared-secret {encrypted} <string> Configures the shared secret string used
to communicate with the
accounting server.
disable tacacs Disables .
disable tacacs-accounting Disables accounting.
disable tacacs-authorization Disables CLI command authorization.
enable tacacs Enables . Once enabled, all CLI
logins are sent to one of the two
server for login name
authentication and accounting.
enable tacacs-accounting Enables accounting. If
accounting is use, the client
must also be enabled.
enable tacacs-authorization Enables CLI command authorization.
When enabled, each command is
transmitted to the remote
server for authorization before the
command is executed.