Juniper MEDIA FLOW CONTROLLER 2.0.4 -, Administrator'S Manual

Page: 368 / 400

Media Flow Controller CLI Commands Media Flow Controller Administrator’s Guide
368 tacacs-server Copyright © 2010, Juniper Networks, Inc.
tacacs-server
(Terminal Access Controller Access-Control System Plus) is a protocol that
provides access control for routers, network access servers and other networked computing
devices via one or more centralized servers. provides separate authentication,
authorization and accounting services. servers are tried in the order they are
configured.
tacacs-server
host <IP_address>
auth-port <port>
auth-type {ascii | pap}
key <string>
prompt-key
retransmit <retries>
timeout <seconds>
key [<key_string>]
retransmit <retries>
timeout <seconds>
Notes:
•
host <IP_address>
—Add a server to the set of servers used for
authentication. Some of the arguments given may override the configured global defaults
for all servers. Use no tacacs-server host <IP_address> to delete all
servers with the specified IP address. To refine which host is deleted, no
tacacs-server host <IP_address> auth-port <port> may be specified.
•
auth-port
—For this host, sets or clears (with no) the port for . The same
IP address can be used in more than one tacacs-server host command as long as
the auth-port is different for each. A UDP port number, auth-port must be specified
immediately after the host option (if present). Default is 49.
•
auth-type
—For this host, specify which of the two currently supported
authentication methods (ascii or pap) to use. Default is pap.
•
key
—For this host, set, or clear (with no), the shared secret text string used to
communicate with any server. If unspecified, the user is prompted for it.
•
prompt-key
—Mutually exclusive with key <string>. It requests to be prompted for
the key, with the entry echoed as asterisk (*) characters, for greater security.
•
retransmit
—For this host, set or reset to 0 (zero) (with no), the number of times the
client attempts to authenticate with any server. Range is 0-5, default is 1.
Set to 0 to disable retransmissions.
•
timeout
—For this host, set or reset to default (with no), the wait time for
retransmitting a request to any server. Range is 1-60, default is 3.
•
key
—Sets, or clears (with no), a global communication value for all servers.
Can be overridden in a tacacs-server host command. Sets the shared secret text string
used to communicate with any server. If the positive form of the private key
command is used with no key, the user is prompted for the key. Entries made at this
prompt echo the asterisk (*) character, and the user must enter the same string twice.
•
retransmit
—Sets, or resets to 0 (zero) (with no), a global communication value for all
servers. Can be overridden in a tacacs-server host command. Range is 0-5,