show tacacs

show tacacs

Description

Displays the current TACACS+ configuration and statistics.

Syntax Description

This command has no arguments or variables.

Default

N/A.

Usage Guidelines

The output of this command displays the following information:

  • TACACS+—The current state of TACACS+, enabled or disabled.

  • TACACS+ Authorization—The current state of TACACS+ authorization, enabled or disabled.

  • TACACS+ Accounting—The current state of TACACS+ accounting, enabled or disabled.

  • TACACS+ Server Connect Timeout—The amount of time configured to detect and recover from a TACACS+ server failure.

  • Primary TACACS+ Server—Describes information about the primary TACACS+ server, including:

    • The name of the primary TACACS+ server.

    • The IP address of the primary TACACS+ server.

    • The TCP port to use to contact the primary TACACS+ server.

    • The IP address and VR used by the switch.

    • The shared secret configured for the primary TACACS+ server.

  • Secondary TACACS+ Server—Contains the same type of output as the primary TACACS+ server for the secondary TACACS+ server, if configured.

  • TACACS+ Acct Server Connect Timeout—The amount of time configured to detect and recover from a TACACS+ accounting server failure.

  • TACACS+ Accounting Server parameters, if configured. Contains the same type of output as the TACACS+ server for the TACACS+ accounting server(s), if configured.

Example

The following command displays TACACS+ client configuration and statistics:

show tacacs

The following is sample output from this command:

TACACS+: enabled
TACACS+ Authorization: enabled
TACACS+ Accounting : enabled
TACACS+ Server Connect Timeout sec: 3
Primary TACACS+ Server:
Server name   :
IP address    :  10.201.31.238
Server IP Port:  49
Client address:  10.201.31.65 (VR-Default)
Shared secret :  qijxou
Secondary TACACS+ Server:
Server name   :
IP address    :  10.201.31.235
Server IP Port:  49
Client address:  10.201.31.65 (VR-Default)
Shared secret :  qijxou
TACACS+ Acct Server Connect Timeout sec: 3
Primary TACACS+ Accounting Server:
Server name   :
IP address    :  10.201.31.238
Server IP Port:  49
Client address:  10.201.31.65 (VR-Default)
Shared secret :  qijxou
Secondary TACACS+ Accounting Server:
Server name   :
IP address    :  10.201.31.235
Server IP Port:  49
Client address:  10.201.31.65 (VR-Default)
Shared secret :  qijxou

History

This command was first available in ExtremeXOS 10.1.

Platform Availability

This command is available on ExtremeSwitching X435, X440-G2, X450-G2, X460-G2, X465, X590, X620, X670-G2, X690, X695, X870, 5320, 5420, and 5520 series switches.

9037398-00 Rev AA