Filter
Top Products
Parameter Description
Host IP address of the server.
Default: N/A
Key Shared secret to authenticate communication between the TACACS+ client and server.
Default: N/A
TCP Port TCP port used by server.
Default: 49
Retransmits Maximum number of times a request is retried.
Default: 3
Timeout Timeout period for TACACS+ requests, in seconds.
Default: 20 seconds
Mode Enables or disables the server.
Default: enabled
Session Authorization Enables or disables session authorization. Session authorization turns on the optional
authorization session for admin users.
Default: disabled
Table 51:
TACACS+ Server Configuration Parameters
Using the WebUI
1. Navigate to the Configuration > Security > Authentication > Servers page.
2. Select TACACS Server to display the TACACS Server List.
3. To configure a TACACS+ server, enter the name for the server and click Add.
4. Select the name to configure server parameters. Enter parameters as described in Table 51. Select the Mode
checkbox to activate the authentication server.
5. Click Apply to apply the configuration.
NOTE: The configuration does not take effect until you perform this step.
Using the CLI
The following command configures, enables a TACACS+ server and enables session authorization:
(host)(config) #aaa authentication-server tacacs <name>
clone default
host <ipaddr>
key <key>
enable
session-authorization
Configuring a Windows Server
Table 52 defines parameters for a Windows server used for stateful NTLM authentication.
DellPowerConnectW-SeriesArubaOS6.2 | User Guide Authentication Servers | 174