11.19. Tacacs+ Commands

11.19.1. tacacs-server host

Command Purpose

Specifies and defines the IP address of the TACACS+ server host.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

tacacs-server host HOST_IP_ADDR ( { key ( 8 | secret | ) STRING | timeout SECONDS | port PORT | single-connection | primary } | ) ( source-interface IFNAME | source-ip SRC_IP_ADDR | )

tacacs-server host mgmt-if IP_ADDR ( { key ( 8 | secret | ) STRING | timeout SECONDS | port PORT | single-connection | primary } | )

no tacacs-server host ( mgmt-if | ) IP_ADDR ( port PORT | )

Parameter

Parameter Description

Parameter Value

mgmt-if

Management port

-

IP_ADDR

TACACS+ server IP address

IPv4 address

single-connection

Maintains a single open connection

-

primary

TACACS+ primary server

-

PORT

TACACS server port number (default 49)

1-65535

SECONDS

Time to wait for a TACACS server to reply, the range is 1 to 20, default 5s

1-20

STRING

Set TACACS+ encryption key

Up to 256 characters

8

Specifies a hidden password will follow

-

secret

Display the current shared key with cipher text

-

IFNAME

Name of source interface

Supportphysical/aggregation/loopback/vlan/tunnelports

SRC_IP_ADDR

Source IP address

IPv4 address

Command Mode

Global Config

Default

No Tacacs+ server is configured by default

Usage

Add or delete a TACACS+ server host.

If the source interface or source IP address is specified, the packet transmit will use the related IP address as source address.

Examples

The following example shows how to specify a TACACS+ primary server host:

Switch# configure terminal
Switch(config)# tacacs-server host 10.10.10.1 port 55 key my_key primary

11.19.2. clear tacacs statistics

Command Purpose

To reset statistics on TACACS+ servers, use the clear tacacs statistics EXEC command.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

clear tacacs statistics

Command Mode

Privileged EXEC

Default

None

Usage

Reset statistics on TACACS+ servers.

Examples

The following example shows how to reset statistics on TACACS+ servers:

Switch# clear tacacs statistics

Related Commands

show tacacs

11.19.3. show tacacs

Command Purpose

To display statistics for a TACACS+ server, use the show tacacs command in EXEC configuration mode.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

show tacacs

Command Mode

Privileged EXEC

Default

None

Usage

This command is used to show TACACS+ servers statistics.

Examples

The following example shows how to show TACACS+ servers:

Switch# configure terminal
Switch(config)# clear tacacs statistics

Switch# show tacacs

Tacacs+ Primary Server            : 10.10.33.29(mgmt-if) port 49
Tacacs+ Current Server            : 10.10.33.29(mgmt-if) port 49

Tacacs+ Primary Server            : 10.10.33.29(mgmt-if)
Server port               : 49             
Socket opens              : 42             
Socket closes             : 42             
Socket aborts             : 0              
Socket errors             : 0              
Socket Timeouts           : 0              
Failed Connect Attempts   : 3              
Total Packets Sent        : 66             
Total Packets Recv        : 66      

Related Commands

tacacs-server host