Chapter 29: Security
STANDARD Revision 1.0
C4® CMTS Release 8.3 User Guide
© 2016 ARRIS Enterprises LLC. All Rights Reserved.
851
Command Keyword
Description
Default Value
Port
TACACS server’s TCP port number
49
Timeout
Time in seconds that the C4/c CMTS waits for a response from the TACACS
server before aborting a TACACS transaction.
3
Single-connect
If true, indicates that the server supports multiplexing multiple
sessions over a single connection.
false
Source-interface
The interface from which all TACACS packets are sourced.
no
Caution: Those operators and MSOs who are using Linux or freeware TACACS servers should configure their servers for
multi-connection mode; otherwise, some users who are entitled to authorization may be denied. Those operators and
MSOs who are not using Linux or freeware TACACS servers may prefer to set those servers to single-connection mode in
order to avoid running out of available ports during heavy command usage.
Sample Procedure for Configuring TACACS Accounting
This procedure assumes that TACACS servers, hosts, and groups have already been configured.
To Configure TACACS Accounting
1.
Enable global TACACS:
configure accounting acct1 [method_list_name] tacacs name [tacacs_group_name]
2.
Enable local accounting:
configure accounting acct4 [method_list_name] local
3.
To configure TACACS accounting on a per vty line basis, choose from the commands in this step.
Shell Accounting — These commands enable shell accounting, which logs only when a new session is started and
stopped or just stopped.
configure line vty [0
–
15] accounting acct1 [method_list_name] shell start-stop
configure line vty [0
–
15] accounting acct1 [method_list_name] shell stop-only
Command Accounting — This logs only when commands using privilege levels 0 through 15 are executed.
configure line vty [0
–
15] accounting acct1 [method_list_name] command [0-1]