TACACS protocol
U
SER
G
UIDE
283
set tacacs authorder tacacs local
is used to configure the order by which the authentication will be allowed. The sequence of the
command indicates that the authentication will occur first by sending the request of authentication
in remote towards Tacacs Server, and only if it does not reply, the local authentication is tried.
The command:
set tacacs retries N
specifies the number of attempts for connection with Tacacs Server.
The command:
set tacacs timeout N
indicates the waiting timeout (in seconds)for reply from Tacacs Server.
The command:
set tacacs source 172.20.1.1
establishes that Tacacs packets originated by the router must be sent by using the value
172.20.1.1
as IP source. It is also available:
set tacacs source loopback
in order to establish the loopback address as IP source address.
Here follows an example of connection of a user with level of privilege 3:
vll$ telnet 10.10.113.1
---------------------------------------------------------------
(IMOLA) (port 0)
---------------------------------------------------------------
login: user
Password:
: Authentication OK
Service Type is: Login-User
Privilige Level is: 3
Idle timeout is set to 3600 seconds
Connected Users:
pts/0 user@IMOLA
You are logged on pts/0
user@IMOLA#
while a super-user:
vll$ telnet 10.10.113.1
---------------------------------------------------------------
(IMOLA) (port 0)
---------------------------------------------------------------
login: admin
Password:
: Authentication OK
Service Type is: Administrative-User
Privilige Level is: 15
Idle timeout is set to 3600 seconds
