5-25
Cisco Wireless LAN Controller Configuration Guide
OL-17037-01
Chapter 5 Configuring Security Solutions
Configuring TACACS+
Step 10 In the Server Timeout field, enter the number of seconds between retransmissions. The valid range is 5
to 30 seconds, and the default value is 5 seconds.
Note Cisco recommends that you increase the timeout value if you experience repeated
reauthentication attempts or the controller falls back to the backup server when the primary
server is active and reachable.
Step 11 Click Apply to commit your changes.
Step 12 Click Save Configuration to save your changes.
Step 13 Repeat the previous steps if you want to configure any additional services on the same server or any
additional TACACS+ servers.
Step 14 To specify the order of authentication when multiple databases are configured, click Security > Priority
Order > Management User. The Priority Order > Management User page appears (see Figure 5-11).
Figure 5-11 Priority Order > Management User Page
Step 15
For Authentication Priority, choose either Radius or TACACS+ to specify which server has priority over
the other when the controller attempts to authenticate management users. By default, the local database
is always queried first. If the username is not found, the controller switches to the TACACS+ server if
configured for TACACS+ or to the RADIUS server if configured for Radius. The default setting is local
and then Radius.
Step 16 Click Apply to commit your changes.
Step 17 Click Save Configuration to save your changes.
Using the CLI to Configure TACACS+
Use the commands in this section to configure TACACS+ through the controller CLI.
Note Refer to the “Using the GUI to Configure TACACS+” section on page 5-23 for the valid ranges and
default values of the parameters used in the CLI commands.
1. Use these commands to configure a TACACS+ authentication server:
• config tacacs auth add index server_ip_address port# {ascii | hex} shared_secret—Adds a
TACACS+ authentication server.
• config tacacs auth delete index—Deletes a previously added TACACS+ authentication server.
To Next Page
Loading...
Need help?
General
