Cisco AS5800 Specifications download pdf (Page 165)

4-27

Cisco AS5800 Operations, Administration, Maintenance, and Provisioning Guide

DOC-7810814=

Chapter 4 Administration

Access Service Security

Communicating with a TACACS+ Server

The following global configuration commands enable communication between the TACACS+ security

(database) server and the Cisco AS5800.

Step 1 Specify the IP address or the host name of the remote TACACS+ server host. This host is typically a

UNIX or NT system running TACACS+ software.

5800-1(config)# tacacs-server host {hostname | ip-address}

Step 2 Specify a shared secret text string used between the Cisco AS5800 and the TACACS+ server. The

Cisco AS5800 and TACACS+ server use this text string to encrypt passwords and exchange responses.

5800-1(config)# tacacs-server key shared-secret-text-string

Step 3 Type Ctrl-Z to return to privileged EXEC mode.

5800-1(config)# Ctrl-Z

5800-1#

Step 4 Save your changes when ready.

5800-1# copy running-config startup-config

For example, to enable the remote TACACS+ server to communicate with the Cisco AS5800, enter the

commands as follows:

5800-1# configure terminal

5800-1(config)# tacacs-server host alcatraz

5800-1(config)# tacacs-server key abra2cad

The host name of the TACACS+ server in the previous example is alcatraz. The key in the previous

example (abra2cad) is the encryption key shared between the TACACS+ server and the Cisco AS5800.

Substitute your own TACACS+ server host name and password for those shown.

For more information about these commands, refer to the security command reference for your

Cisco IOS release, which is part of the Cisco IOS configuration guides and command references

documentation.

1 2 ... 160 161 162 163 164 165 166 167 168 169 170 ... 333 334

No comments

Cisco AS5800 Specifications Page 165