How to Configure TACACS+
SUMMARY STEPS
1. enable
2. configure terminal
3. tacacs-server host hostname
4. aaa new-model
5. aaa group server tacacs+ group-name
6. server ip-address
7. end
8. show running-config
9. copy running-config startup-config
DETAILED STEPS
Command or Action
Step 1
enable
Example:
Switch> enable
Step 2
configure terminal
Example:
Switch# configure terminal
Step 3
tacacs-server host hostname
Example:
Switch(config)# tacacs-server host
yourserver
Step 4
aaa new-model
Example:
Switch(config)# aaa new-model
Step 5
aaa group server tacacs+ group-name
Example:
Switch(config)# aaa group server tacacs+
your_server_group
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
884
Purpose
Enables privileged EXEC mode. Enter your password if
prompted.
Enters the global configuration mode.
Identifies the IP host or hosts maintaining a TACACS+ server.
Enter this command multiple times to create a list of preferred
hosts. The software searches for hosts in the order in which you
specify them.
For hostname, specify the name or IP address of the host.
Enables AAA.
(Optional) Defines the AAA server-group with a group name.
This command puts the Switch in a server group
subconfiguration mode.