12: User Authentication
SLCâ„¢ 8000 Advanced Console Manager User Guide 252
TACACS+ Commands
These commands for the command line interface correspond to the web page entries described
above.
To configure the SLC unit to use TACACS+ to authenticate users who log in via the Web,
SSH, Telnet, or the console port:
set tacacs+ <one or more parameters>
Parameters
state <enable|disable>
server1 <IP Address or Name>
server2 <IP Address or Name>
server3 <IP Address or Name>
secret <TACACS+ Secret>
encrypt <enable|disable>
authservice <login|pap|chap>
timeout <1-10 seconds>
dataports <Port List>
listenports <Port List>
clearports <Port List>
escapeseq <1-10 Chars>
breakseq <1-10 Chars>
custommenu <Menu Name>
allowdialback <enable|disable>
dialbacknumber <Phone Number>
group <default|power|admin>
permissions <Permission List>
Notes: See User Attributes & Permissions from LDAP Schema or RADIUS VSA (on page
243) for information on groups and user rights.
To set user group and permissions for TACACS+ users:
set tacacs+ group <default|power|admin>
To set permissions for TACACS+ users not already defined by the user rights group:
set tacacs+ permissions <Permission List>
where
<Permission List> is one or more of nt, sv, dt, lu, ra, sk, um, dp, do,
ub, rp, rs, rc, dr, wb, sn, ad, md, sd
To remove a permission, type a minus sign before the two-letter abbreviation for a user
right.
To set a default custom menu for TACACS+ users:
set tacacs+ custommenu <Menu Name>
To view TACACS+ settings:
show tacacs+