Reference Guide

tacacs-server keystring
Use this command to set the global authentication encryption key used for all TACACS+
communications between the TACACS+ server and the client.
Format tacacs-server keystring
Mode Global Config
The following shows an example of this command.
(Extreme 220) (Config) #tacacs-server keystring
Enter tacacs key:********
Re-enter tacacs key:********
tacacs-server source-interface
Use this command in Global Configuration mode to configure the source interface (Source IP address)
for TACACS+ server configuration. The selected source-interface IP address is used for filling the IP
header of management protocol packets. This allows security devices (firewalls) to identify the source
packets coming from the specific switch.
If a source-interface is not specified, the primary IP address of the originating (outbound) interface is
used as the source address.
Format
tacacs-server source-interface {unit/slot/port| loopback
loopback-id | vlan vlan-id}
Mode Global Config
Parameter Description
unit/slot/
port
The unit identifier assigned to the switch, in unit/slot/port format.
loopback-id
The loopback interface. The range of the loopback ID is 0 to 7.
vlan-id
Configures the VLAN interface to use as the source IP address. The range of the VLAN ID is 1
to 4093.
The following shows an example of the command.
(Config)#tacacs-server source-interface loopback 0
(Config)#tacacs-server source-interface 1/0/1
(Config)#no tacacs-server source-interface
no tacacs-server source-interface
Use this command in Global Configuration mode to remove the global source interface (Source IP
selection) for all TACACS+ communications between the TACACS+ client and the server.
Format
no tacacs-server source-interface
Mode Global Config
Management Commands
ExtremeSwitching 200 Series: Command Reference Guide for version 01 .02.04.0007 126