Juniper JUNOSE 11.1.X - BROADBAND ACCESS CONFIGURATION GUIDE 6-4-2010, Configuration Manual

Page: 367 / 794

example, no line vty 6 causes the router to remove lines 6 through 19. You
cannot remove lines 0 through 4.
■
See line
login authentication
■
Use to apply an authentication list to the vty lines you specified on your router.
■
Example
host1(config-line)# login authentication my_auth_list
■
Use the no version to specify that the router should use the default authentication
list.
■
See login authentication
tacacs-server host
■
Use to add or delete a host to or from the list of servers.
■
You can optionally specify a nondefault port number, a host-specific key, a single
connection and a timeout interval.
■
Use the primary keyword to assign the host as the primary host.
■
If a timeout value is specified, it overrides the global timeout value set with the
tacacs-server timeout command for this server only.
■
You can configure additional hosts by using this command. The designated
primary host is always the first in the search order; the remaining hosts are
contacted in the order in which they were created. If the primary host is deleted,
or if you modify the primary host without specifying the
primary keyword, the
next host in the search order becomes the primary host. The search order is
maintained when the NAS is reloaded.
■
Example
host1(config)# tacacs-server host 192.168.1.27 port 10 timeout 3 key
your_secret primary
host1(config)# no tacacs-server host 192.168.1.27
■
Use the no version to delete the host from the list of servers.
■
See tacacs-server host
tacacs-server key
■
Use to set or reset the authentication encryption key value shared by all
servers that do not have a server-specific key set up by the
tacacs-server host
command.
■
This key must match the key configured on the process.
■
Leading spaces are ignored; however, spaces at the end of the key are recognized.
If you use spaces in the key, do not enclose the key in quotation marks.
■
Example
Configuring Support
■ 327
Chapter 9: Configuring