Lenovo RackSwitch G8332, Command Reference Manual

Page: 357 / 776

© Copyright Lenovo 2016 Chapter 4: Configuration Commands
357
tacacs ­ server secondary ­ host {
<hostname>
|
<IP address>
} key
<1 ‐ 32 characters>
Sets the secondary server address and the shared secret between the
switch and the server(s).
Command mode: Global configuration
tacacs ­ server secondary ­ host [data ­ port|mgt ­ port]
Defines the secondary interface port to use to send server requests.
Select the port to use for data transfer.
Command mode: Global configuration
no tacacs ­ server secondary ­ host [key]
Deletes the secondary server. The
key
option only removes the
shared secret between the switch and the server.
Command mode: Global configuration
[no] tacacs ­ server secure ­ backdoor
Enables or disables secure back door access through Telnet,
SSH/SCP or HTTP/HTTPS only when the servers are not
responding.
This feature is recommended to permit access to the switch when the
servers become unresponsive. If no back door is enabled, the only
way to gain access when servers are unresponsive is to use the back
door via the console port.
The default is
disabled
.
Command mode: Global configuration
tacacs ­ server timeout
<4 ‐ 15>
Sets the amount of time, in seconds, before a server authentication
attempt is considered to have failed. The default is
5
seconds.
Command mode: Global configuration
tacacs ­ server user ­ mapping
<0 ‐ 15>
{user|oper|admin}
Maps a authorization level to a switch user level. Enter a
authorization level (0 ‐ 15), followed by the corresponding switch user level.
Command mode: Global configuration
no tacacs ­ server user ­ mapping
<0 ‐ 15>
Removes a authorization level.
Command mode: Global configuration
ip tacacs source ­ interface loopback
<1 ‐ 5>
Sets the source loopback interface.
Command mode: Global configuration
Table 152.
Server Configuration Options (continued)
Command Syntax and Usage