Cisco Preparative Procedures & Operational User Guide
© 2016 Cisco Systems, Inc. All rights reserved.
Firepower-chassis /security/radius # create server server-name
4) (Optional) Specify the port used to communicate with the RADIUS server.
Firepower-chassis /security/radius/server # set authport authport-num
5) Set the RADIUS server key:
Firepower-chassis /security/radius/server # set key
To set the key value, press Enter after typing the set key command and enter the key value at the
prompt.
6) (Optional) Specify when in the order this server will be tried:
Firepower-chassis /security/radius/server # set order order-num
7) (Optional) Set the number of times to retry communicating with the RADIUS server before noting the
server as down:
Firepower-chassis /security/radius/server # set retries retry-num
8) Specify the time interval that the system should wait for a response from the RADIUS server before
noting the server as down:
Firepower-chassis /security/radius/server # set timeout seconds
9) Commit the transaction to the system configuration:
Firepower-chassis /security/radius/server # commit-buffer
4.4.5 Configure TACACS+ via CLI
1) Enter security mode:
Firepower-chassis# scope security
2) Enter security TACACS+ mode:
Firepower-chassis /security # scope tacacs
3) Create a TACACS+ server instance and enter security TACACS+ server mode:
Firepower-chassis /security/tacacs # create server server-name
4) Specify the TACACS+ server key:
Firepower-chassis /security/tacacs/server # set key
To set the key value, press Enter after typing the set key command and enter the key value at the
prompt.
5) (Optional) Specify when in the order this server will be tried:
Firepower-chassis /security/tacacs/server # set order order-num
6) Specify the time interval that the system should wait for a response from the TACACS+ server before
noting the server as down:
Firepower-chassis /security/tacacs/server # set timeout seconds
7) (Optional) Specify the port used to communicate with the TACACS+ server:
Firepower-chassis /security/tacacs/server # set port port-num