5-39
Basic Configuration
CircuitAccess: Selects the default Circuit Access setting for new TACACS
users. The Circuit Access setting determines which Circuit Module(s) each
account will be allowed to control. (Defaults; Administrator and SuperUser =
All Circuits On, User = All Circuits Off, ViewOnly = All Circuits Off.)
Notes:
• AdministratorandSuperUserlevelaccountsalwayshaveaccesstoall
circuits.
• Userlevelaccountswillonlyhaveaccesstothecircuitsthataredefinedvia
the"CircuitAccess"parameter.
• ViewOnlyaccountsarenotallowedtoinvokeswitchingcommands.
CircuitGroupAccess: Selects the default Circuit Group Access setting for
new TACACS users. For more information on Circuit Groups, please refer to
Section 5.6. (Defaults; Administrator and SuperUser = All Circuit Groups On,
User = All Circuit Groups Off, ViewOnly = All Circuit Groups Off.)
Notes:
• Inordertousethisfeature,CircuitGroupsmustfirstbedefinedasdescribed
inSection5.6.
• AdministratorandSuperUserlevelaccountswillalwayshaveaccesstoall
CircuitGroups.
• UserLevelaccountswillonlyhaveaccesstotheCircuitgroupsthatare
definedviatheCircuitGroupAccessparameter.
• ViewOnlyaccountsarenotallowedtoinvokeswitchingcommands.
ServiceAccess: Selects the default Service Access setting for new TACACS
users. The Service Access setting determines whether each account will be
able to access command mode via Serial Port, Telnet/SSH or Web. In addition,
the Service Access setting also determines whether each account will be able
to employ the Outbound Access function. For example, if Telnet/SSH Access is
disabled, then the default setting for new TACACS accounts will not allow access
to command mode via Telnet or SSH. (Default = Serial Port = On, Telnet/SSH =
On, Web = On.)
Note:IfOutboundAccesshasbeendisabledviatheNetworkParameters
menu,thentheServiceAccessparameterwillnotbeallowedtograntOutbound
AccesstonewTACACSusers.