TACACS and TACACS+ Configuration

Configuring TACACS or TACACS+ authentication involves the following steps.

Is this the order one would reasonably follow?
  1. Identify one or more TACACS or TACACS+ servers.
  2. (Optional) Assign different functions to different servers if desired.
  3. (Optional) Set optional TACACS and TACACS+ parameters.
  4. Configure authentication.
  5. (Recommended, optional) For TACACS+, configure authorization.
    • Configure privilege-level authorization.
    • Configure command authorization.
  6. (Optional) For TACACS+, configure accounting.

In this section:

  1. TACACS/TACACS+ Configuration Considerations
  2. Identifying the TACACS/TACACS+ Servers
  3. Specifying Different Servers for Individual AAA Functions
  4. Setting Optional TACACS and TACACS+ Parameters
  5. Configuring Authentication-method Lists for TACACS and TACACS+
  6. Configuring TACACS+ Authorization
  7. TACACS+ Accounting Configuration
  8. Configuring an Interface as the Source for All TACACS and TACACS+ Packets
  9. Configuring TACACS/TACACS+ for Devices in a Traditional Stack
  10. TACACS Configuration Example
  11. TACACS+ Configuration Example
Parent topic: TACACS+ Server Authentication