生まれ変わる - umarekawaru

User Tools

Site Tools

Trace:
technical:tacacs

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
technical:tacacs [2022/09/26 15:02] – jctechnical:tacacs [2022/10/03 08:43] (current) – jc
Line 3: Line 3:
 ## Linux ## Linux
 ### Prerequisites ### Prerequisites
-Install FreeRADIUS a+Install [FreeRADIUS](technical:radius)
 ### Install ### Install
  
-Add TACACS repository to your distribution or install from source.+TACACS+ may either be installed using an RPM and a supported distribution's repository or from source.
  
-* [TACACS Source](https://shrubbery.net/pub/tac_plus/https://shrubbery.net/pub/tac_plus/tacacs-F4.0.4.28.tar.gz)+* [TACACS Source](https://shrubbery.net/pub/tac_plus/tacacs-F4.0.4.28.tar.gz)
 * [TACACS RHEL 7 Repository](http://li.nux.ro/download/nux/misc/el7/x86_64/tac_plus-4.0.4.26-1.el7.nux.x86_64.rpm) * [TACACS RHEL 7 Repository](http://li.nux.ro/download/nux/misc/el7/x86_64/tac_plus-4.0.4.26-1.el7.nux.x86_64.rpm)
  
Line 22: Line 22:
 gpgkey=http://li.nux.ro/download/nux/RPM-GPG-KEY-nux.ro gpgkey=http://li.nux.ro/download/nux/RPM-GPG-KEY-nux.ro
 ``` ```
-#### Source+ 
 +``` bash 
 +sudo dnf update 
 +sudo dnf install tac_plus
 ``` ```
-wget +#### Source 
-tar +``` bash 
-cd+wget https://shrubbery.net/pub/tac_plus/tacacs-F4.0.4.28.tar.gz 
 +tar xzvf tacacs-F4.0.4.28.tar.gz 
 +cd tacacs-F4.0.4.28 
 +./configure
 make make
 sudo make install sudo make install
 ``` ```
 ### Configuration ### Configuration
 +
 +Generate passwd hash using `tac_pwd`
  
 /etc/tac_plus.conf /etc/tac_plus.conf
Line 52: Line 60:
  }  }
 ``` ```
 +
 ### Startup ### Startup
 +
 +``` bash
 +sudo tac_plus -C /etc/tac_plus.conf
 +```
 +
 ## Cisco ## Cisco
 __Server Profile__ __Server Profile__
Line 71: Line 85:
 __AAA Profile__ __AAA Profile__
 ``` ```
 +aaa new-model
 aaa authentication login default local aaa authentication login default local
 aaa authentication login <list> group <group> local aaa authentication login <list> group <group> local
-aaa authorization exec default local  +aaa authorization exec default if-authenticated 
-aaa authorization exec <list> group <group> local +aaa authorization exec <list> group <group> local 
 +aaa authorization network default if-authenticated
 aaa authorization commands 15 default local  aaa authorization commands 15 default local 
 aaa authorization commands 15 <list> group <group> local  aaa authorization commands 15 <list> group <group> local 
technical/tacacs.1664218973.txt.gz · Last modified: 2022/09/26 15:02 by jc

Page Tools