Policy Pages Reference : Security Policy Settings : TACACS+
  
TACACS+
You set up TACACS+ server authentication for the selected security policy in the TACACS+ page.
Enabling this feature is optional.
TACACS+ is an authentication protocol that enables a remote access server to forward a login password for a user to an authentication server to determine whether access is allowed to a given system.
For details about TACACS+, see the SteelHead Management Console User’s Guide for SteelHead CX.
The TACACS+ page contains the following groups of settings:
•  Default TACACS+ Settings
•  TACACS+ Servers
Default TACACS+ Settings
Complete the configuration as described in this table.
Control
Description
Set a Global Default Key
Specify this option to enable a global server key for the server.
Global Key
Specify the global server key.
Note: Leave it unchanged to leave the global key unchanged.
Confirm Global Key
Confirms the global server key.
Timeout (seconds)
Specify the time-out period in seconds (1 60). The default value is 3.
Retries
Specify the number of times you want to allow the user to retry authentication. Valid values are 0-5. The default is 1.
TACACS+ Servers
Complete the configuration as described in this table.
Control
Description
Add a TACACS+ Server
Displays the controls for defining a new TACACS+ server as described in this table.
Server IP Address
Specify the server IP address.
Authentication Port
Specify the port for the server. The default value is 49.
Authentication Type
Click either PAP or ASCII to select the authentication type.
Override the Global Default Key
Specify this option to override the global server key for the server.
Server Key - Specify the override server key.
Confirm Server Key - Confirm the override server key.
Timeout (seconds)
Specify the time-out period in seconds (1-60). The default is 3.
Retries
Specify the number of times you want to allow the user to retry authentication. Valid values are 0-5. The default is 1.
Enabled
Enables the new server.
Add
Adds the TACACS+ server to the list.
Remove Selected
Select the check box next to the name and click Remove Selected.