Extreme Networks ExtremeWare XOS 11.3, Руководство пользователя

Страница: 332 / 698

Security
ExtremeWare XOS 11.3 Concepts Guide
332
Do not use the
encrypted
keyword to set the shared secret. The
encrypted
keyword is primarily for
the output of the
show configuration
command, so the shared secret is not revealed in the command
output.
Enabling and Disabling
After server information is entered, you can start and stop authentication as many times as
necessary without needing to reconfigure server information.
To enable authentication, use the following command:
enable tacacs
To disable authentication, use the following command:
disable tacacs
Configuration Example
This section provides a sample server configuration.
The following example:
●
Configures the primary server
●
Configures the shared secret for the primary server
●
Configures the secondary server
●
Configures the shared secret for the secondary server
●
Enables on the switch
All other settings use the default settings as described earlier in this section or in the ExtremeWare XOS
Command Reference Guide .
configure tacacs primary server 10.201.31.238 client-ip 10.201.31.85 vr "VR-Default"
configure tacacs primary shared-secret purple
configure tacacs secondary server 10.201.31.235 client-ip 10.201.31.85 vr "VR-Default"
configure tacacs secondary shared-secret purple
enable tacacs
To display the server settings, use the
show tacacs
command. The following is sample
output from this command:
: enabled
Authorization: disabled
Accounting : disabled
Server Connect Timeout sec: 3
Primary Server:
Server name :
IP address : 10.201.31.238
Server IP Port: 49
Client address: 10.201.31.85 (VR-Default)
Shared secret : purple
Secondary Server:
Server name :
IP address : 10.201.31.235