TACACS+ Configuration

Configuring TACACS+ authentication involves the following steps.

  1. Identify one or more TACACS+ servers.
  2. Configure authentication.
  3. (Optional) Assign different functions to different servers if desired.
  4. (Optional) Set optional TACACS+ parameters.
  5. (Recommended, optional) Configure authorization.
    • Configure privilege-level authorization.
    • Configure command authorization.
  6. (Optional) Configure accounting.

In this section:

  1. TACACS+ Configuration Considerations
  2. Identifying the TACACS+ Servers
  3. Configuring Authentication-method Lists for TACACS+
  4. Entering Privileged EXEC Mode after a Telnet or SSH Login
  5. Specifying Different Servers for Individual AAA Functions
  6. Setting Optional TACACS+ Parameters
  7. Configuring TACACS+ Authorization
  8. TACACS+ Accounting Configuration
  9. Configuring an Interface as the Source for All TACACS+ Packets
  10. Configuring TACACS+ for Devices in a Traditional Stack
  11. TACACS+ Configuration Example
Parent topic: TACACS+ Server Authentication