Setting Optional TACACS+ Parameters

You can set the following optional parameters in a TACACS+ configuration:

  • TACACS+ key: This parameter specifies the value that the RUCKUS device sends to the TACACS+ server when trying to authenticate user access.
  • Retransmit interval: This parameter specifies how many times the RUCKUS device resends an authentication request when the TACACS+ server does not respond. The retransmit value can be from 1 through 5 times. The default is 3 times.
  • Dead time: This parameter specifies how long the RUCKUS device waits for the primary authentication server to reply before determining the server is dead and trying to authenticate using the next server. The dead-time value can be from 1 through 5 seconds. The default is 3 seconds.
  • Timeout: This parameter specifies how many seconds the RUCKUS device waits for a response from a TACACS+ server before either retrying the authentication request or determining that the TACACS+ servers are unavailable and moving on to the next authentication method in the authentication-method list. The timeout can be from 1 through 15 seconds. The default is 3 seconds.
  • Enable port-based VLAN access: This option allows TACACS+ server management access only to clients connected to ports that are members of a specified port-based VLAN.

In this section:

  1. Setting the TACACS+ Key
  2. Setting the Retransmission Limit
  3. Setting the Timeout Parameter
  4. Enabling Management Access Based on a Port-based VLAN
Parent topic: TACACS+ Configuration