ELTEX MES23xx, Руководство по эксплуатации

Страница: 125 / 208

MES53xx, MES33xx, MES23xx Ethernet Switch Series 125
IP address Port port Time- Ret- Dead- Prio. Usage
Auth Acct Out rans Time
--------------- ----- ----- ------ ------ ------ ----- -----
192.168.16.3 1645 1813 Global 2 Global 0 all
Global values
--------------
TimeOut : 5
Retransmit : 5
Deadtime : 10
Source IPv4 interface :
Source IPv6 interface :
7.4.4
provides a centralized authentication system for managing user access to the device that
ensures compatibility with RADIUS and other authentication mechanisms. provides the following
services:

Authentication. Used when the user logs in with the usernames and his/her passwords.

Authorization. Used when the user logs in. If authentication is successful, an authorization
session will start using the verified username; the server will also verify user privileges.
Global configuration mode commands
Command line prompt in the global configuration mode is as follows:
console(config)#
Table 5.122. Global configuration mode commands
Command Value/Default value Action
tacacs-server host { ip_address
| hostname } [single-
con *port­number port ]
[timeout timeout ] [key
secret_key ] [priority priority ]
hostname: (1..158)
characters
port: (0..65535)/49;
timeout: (1..30) seconds
secret_key: (0..128)
characters
priority: (0..65535)/0;
Add the selected server into the list of TACACS servers used.
-
ip_address - IP address of the TACACS server;
- hostname - TACACS server network name;
- single-connection - restrict the number of connection for
data exchange with the TACACS server to one at a time;
-
port - port number for data exchange with the TACACS
server;
-
timeout - server response timeout;
- secret_key - authentication and encryption key for TACACS
data exchange;
-
priority - TACACS server priority (the lower the value, the
higher the server priority)
- encrypted – secret_key value in the encrypted form.
If
timeout, secret_key parameters are not specified in the
command, the current TACACS server uses the values
configured with the following commands.
encrypted tacacs-server host
{
ip_address | hostname } [single-
connection] [port­number port ]
[timeout timeout ]
[key secret_key ][priority priority ]
no tacacs-server host
{
ip_address | hostname }
Remove the selected server from the list of TACACS servers
used.
tacacs-server key key
key: (0..128)
characters/default key is
an empty string
Specify the default authentication and encryption key for
TACACS data exchange between the device and TACACS
environment.
-
encrypted – secret_key value in the encrypted form.
encrypted tacacs-server key
key