DES-7200 Configuration Guide Chapter 3 TACACS+ Configuration
3-7
3.4 Using TACACS+ to
Authenticate, Authorize
and Account
In the typical TACACS+ network configuration figure, TACACS+ server authenticates,
authorizes and accounts the access users. The following shows the examples of how
to configure TACACS+ to authenticate, authorize and account by login authentication,
authorization and accounting.
3.4.1 Using TACACS+ by Login
Authentication
z Enables aaa first:
DES-7200# configure terminal
DES-7200(config)# aaa new-model
z Then configures tacacs+ server information:
DES-7200(config)# tacacs-server host 192.168.12.219
DES-7200(config)# tacacs-server key aaa
z Configures authentication method of using tacacs+:
DES-7200(config)# aaa authentication login test group tacacs+
z Applies the authentication method on the interface:
DES-7200(config)# line vty 0 4
DES-7200 (config-line)# login authentication test
Through the above configuration, you implement to configure login tacacs+
authentication. The configuration is shown as follows;
DES-7200#show running-config
!
aaa new-model
!
aaa authentication login test group tacacs+
!
tacacs-server host 192.168.12.219