TACACS

Describes TACACS settings.

The Terminal Access Controller Access-Control System (TACACS) is a remote authentication protocol that is used to communicate with an authentication server commonly used in networks. TACACS allows a remote access server to communicate with an authentication server in order to determine if the user has access to the network.

TACACS uses a client-server mechanism. The TACACS server authenticates the TACACS client using information such as user name and password.

To access TACACS screens, click System > TACACS.

TACACS Server Configuration

By default, the tab TACACS Settings displays the TACACS Server Configuration screen.

Figure 1. TACACS Server Configuration

Screen Objective	This screen allows the user to configure the TACACS server configuration.
Navigation	System > TACACS > Server
Fields	Server—select the Server Address Type to be configured or deleted. Server Address Type—select the address type of the TACACS+ server. The default option is IPv4. IP Address—enter the IPv4 address of the TACACS+ server. The TACACS+ client interacts with the server having this IP address. Note: IS5Com TACACS allows information for maximum of 5 servers to be configured. Shared Secret—enter the secret key shared between the client and server (IPv4 or IPv6) for encryption and decryption. The default value is IS5Com. Single Connection—select whether single connect support is enabled/ disabled for the server. The default option is No. The list contains: Yes—allows multiple sessions over a single TCP connection. Thus, the authentication, authorization and accounting process are carried out in a single TCP connection. No—does not allow the multiple sessions to handle over a single TCP connection. Thus, the authentication, authorization and accounting are carried out in separate TCP connection. Server Port—enter the server port number for TACACS protocol. This value ranges from 0 to 65535. The default value is 49 for IPv4 and 4949 for IPv6. Server Timeout (secs)—enter the timeout value within which the TACACS client expects a response from server. This value ranges from 1 to 255. The default value is 5 seconds. The TACACS client assumes that the primary server is down and gets connected with secondary server, after the expiry of this time.
Buttons	Add—adds and saves new configuration. Reset—resets to default value for respective fields and discards all user inputs.The attributes of the default Queue Template cannot be modified. Apply—modifies attributes and saves the changes. Delete—deletes the selected entry. Configure Trace Options—click to access the TACACS Traces screen

TACACS Traces

Figure 2. TACACS Traces

Screen Objective	This screen allows the user to enable or to select the required debug statements that will be useful during debug operation.
Navigation	System > TACACS > Server > TACACS Server Configuration screen appears. Click Configure Trace Options.
Fields	Traces—select the traces for which debug statements is to be generated. The list contains: Info—generates debug statements for informational messages Error—generates debug statements for error message DumpTx—generates debug statements for handling traces. This trace is generated when there is an error condition in transmission of packets. DumpRx—generates debug statements for handling traces. This trace is generated when there is an error condition in reception of packets
Buttons	Apply—adds and saves new configuration. Configure Trace Options—click to access the TACACS Server Configuration screen.

TACACS Active Server Configuration

Figure 3. TACACS Active Server Configuration

Screen Objective	This screen allows the user to set the TACACS server that should be used as primary server.
Navigation	System > TACACS > Active Server or click TACACS AS tab.
Fields	Select—select the Active Server IP address to be deleted. Active Server Address Type—select the address type of the active server. The default option is IPv4. Active Server IP Address—the IP address of the TACACS server that should be set as primary server. Maximum of 5 server's (IPv4 or IPv6) information can be configured for TACACS. This object indicates the active server among these 5 servers created using TACACS Server Configuration screen. The TACACS+ client interacts with the configured server IP address. When set to zero, TACACS disables the active server concept. Retransmit (secs)—enter the number of times the TACACS client remote server searches the list of maximum number of TACACS servers. This value ranges from 1 to 100 seconds. The default value is 2 seconds. If the TACACS client does not receive any response from the server for the given retransmit time, it searches and gets connected with the next server.
Buttons	Apply—modifies attributes and saves the changes. Reset—resets to default value for respective fields and discards all user inputs. Delete—deletes the selected entry.