4-23
Cisco Global Site Selector Administration Guide
OL-10410-01
Chapter 4 Managing GSS User Accounts Through a Server
Specifying the Server Timeout on the GSS
Specifying the Server Timeout on the GSS
As a secondary measure, if the TCP keepalives fail, or if you disable the use of
keepalives, you can use the
tacacs-server timeout
command to define a global
timeout period, in seconds, that specifies how long the GSS waits for
a response to a connection attempt from a server. The timeout value
applies to all defined servers. The default timeout period is 5 seconds.
To specify the timeout period, use the
tacacs-server timeout
command. The
syntax for this global configuration command is as follows:
tacacs-server timeout
seconds
The
seconds
argument is a value from 1 to 255 seconds. The GSS dynamically
applies the modified timeout period and the new value takes effect automatically
on the next connection.
For example, to set the timeout period to 60 seconds, enter:
gss1.example.com(config)#
tacacs-server timeout 60
To reset the timeout period to the default of 5 seconds, enter:
gss1.example.com(config)#
no tacacs-server timeout 60
Specifying Authentication of the GSS
After you identify a server, you can enable the
authentication service on the GSS by using the
aaa authentication
command to
enable authentication. By default, the GSS falls back to local
authentication with either the console port or a Telnet connection if the GSS
cannot remotely contact a server. Optionally, you can specify local
authentication if authentication fails for an FTP, GUI, or SSH
connection.
Note
You must enable remote access on the GSS device (SSH, Telnet, or FTP) before
you enable authentication for the specific GSS access method. See the
Cisco Global Site Selector Getting Started Guide
for details.
