forum.lissyara.su

Код: Выделить всё

key = 12345
accounting file = /var/log/tac.log

group = users {
enable = cleartext enable_users
service = exec {
priv-lvl = 3
 }
}

group = admins {
 enable = cleartext en_pass
 service = exec {
  priv-lvl = 5
 }
}

user = support {
member = users
login = cleartext pass_support
}

user = admin {
 member = admins
 login = cleartext pass_admin
}

Код: Выделить всё

create authen server_host xx.xx.xx.xx protocol tacacs+ port 49 key 12345 timeout 5 retransmit 2
config authen server_group tacacs+ delete server_host xx.xx.xx.xx protocol tacacs+
config authen server_group tacacs+ add server_host xx.xx.xx.xx protocol tacacs+
config authen_login default method local
create authen_login method_list_name tac_plus
config authen_login method_list_name tac_plus method tacacs+ local
config authen_enable default method local_enable
create authen_enable method_list_name tac_plus_ena
config authen_enable method_list_name tac_plus_ena method tacacs+
config authen application console login default
config authen application console enable default
config authen application telnet login method_list_name tac_plus
config authen application telnet enable method_list_name tac_plus_ena
config authen application ssh login default
config authen application ssh enable default
config authen application http login default
config authen application http enable default
config authen parameter response_timeout 0
config authen parameter attempt 3
config authen enable_admin all state enable
enable authen_policy