Nortel Networks BMD00007 Instrukcja Użytkownika Pobierz pdf (Strona 186)

Alteon OS Command Reference

188

 The Configuration Menu BMD00007, November 2007

Table 6-6 TACACS+ Server Menu Options (/cfg/sys/tacacs)

Command Syntax and Usage

prisrv <IP address>

Defines the primary TACACS+ server address.

secsrv <IP address>

Defines the secondary TACACS+ server address.

secret <1-32 character secret>

This is the shared secret between the switch and the TACACS+ server(s).

secret2 <1-32 character secret>

This is the secondary shared secret between the switch and the TACACS+ server(s).

port <TACACS port configure, default 49>

Enter the number of the TCP port to be configured, between 1 - 65000. The default is 49.

retries <TACACS server retries, 1-3>

Sets the number of failed authentication requests before switching to a different TACACS+ server.

The default is 3 requests.

timeout <TACACS server timeout seconds, 4-15>

Sets the amount of time, in seconds, before a TACACS+ server authentication attempt is consid-

ered to have failed. The default is 5 seconds.

bckdoor disable|enable

Enables or disables the TACACS+ back door for Telnet, SSH/SCP, or HTTP/HTTPS.

Enabling this feature allows you to bypass the TACACS+ servers. It is recommended that you use

Secure Backdoor to ensure the switch is secured, because Secure Backdoor disallows access through

the back door when the TACACS+ servers are responding.

The default is disabled.

To obtain the TACACS+ backdoor password for your GbESM, contact your IBM Service and

Support line.

secbd enable|disable

Enables or disables TACACS+ secure back door access through Telnet, SSH/SCP, or HTTP/

HTTPS only when the TACACS+ servers are not responding.

This feature is recommended to permit access to the switch when the TACACS+ servers become

unresponsive. If no back door is enabled, the only way to gain access when TACACS+ servers are

unresponsive is to use the back door via the console port.

The default is disabled.

cmap enable|disable

Enables or disables TACACS+ privilege-level mapping.

The default value is disabled.

1 2 ... 181 182 183 184 185 186 187 188 189 190 191 ... 389 390

Brak uwag

Nortel Networks BMD00007 Instrukcja Użytkownika Strona 186