5-26
Cisco Wireless LAN Controller Configuration Guide
OL-17037-01
Chapter 5 Configuring Security Solutions
Configuring
•
config tacacs auth
(
enable
|
disable
}
index
—Enables or disables a authentication
server.
•
config tacacs auth server-timeout
index
timeout
—Configures the retransmission timeout
value for a authentication server.
2.
Use these commands to configure a authorization server:
•
config tacacs athr add
index
server_ip_address port#
{
ascii
|
hex
}
shared_secret
—Adds a
authorization server.
•
config tacacs athr delete
index
—Deletes a previously added authorization server.
•
config tacacs athr
(
enable
|
disable
}
index
—Enables or disables a authorization
server.
•
config tacacs athr server-timeout
index
timeout
—Configures the retransmission timeout value
for a authorization server.
3.
Use these commands to configure a accounting server:
•
config tacacs acct add
index
server_ip_address port#
{
ascii
|
hex
}
shared_secret
—Adds a
accounting server.
•
config tacacs acct delete
index
—Deletes a previously added accounting server.
•
config tacacs acct
(
enable
|
disable
}
index
—Enables or disables a accounting
server.
•
config tacacs acct server-timeout
index
timeout
—Configures the retransmission timeout value
for a accounting server.
4.
Use these commands to see statistics:
•
show tacacs summary
—Shows a summary of servers and statistics.
•
show tacacs auth stats
—Shows the authentication server statistics.
•
show tacacs athr stats
—Shows the authorization server statistics.
•
show tacacs acct stats
—Shows the accounting server statistics.
For example, information similar to the following appears for the
show tacacs summary
command:
Authentication Servers
Idx Server Address Port State Tout
--- ---------------- ------ -------- ----
1 11.11.12.2 49 Enabled 5
2 11.11.13.2 49 Enabled 5
3 11.11.14.2 49 Enabled 5
Authorization Servers
Idx Server Address Port State Tout
--- ---------------- ------ -------- ----
1 11.11.12.2 49 Enabled 5
2 11.11.13.2 49 Enabled 5
3 11.11.14.2 49 Enabled 5
Accounting Servers
Idx Server Address Port State Tout
--- ---------------- ------ -------- ----
1 11.11.12.2 49 Enabled 5
2 11.11.13.2 49 Enabled 5
3 11.11.14.2 49 Enabled 5