This is an old revision of the document!

---

TACACS+

Linux

Prerequisites

Install FreeRADIUS a

Install

Add TACACS repository to your distribution or install from source.

• TACACS Source
• TACACS RHEL 7 Repository

/etc/yum.repos.d/tacacs.repo

[tacacs-plus]
name=TACACS Plus
baseurl=http://li.nux.ro/download/nux/misc/el7/x86_64/
enabled=1
gpgcheck=1
gpgkey=http://li.nux.ro/download/nux/RPM-GPG-KEY-nux.ro

Configuration

Startup

Cisco

Server Profile

tacacs server <server>
 address ipv4 <ip>
 key <key>
 timeout <value>
!
aaa group server tacacs+ <group>
 server name <server>
 ip tacacs source-interface <interface>
!
ip tacacs source-interface <interface> 

AAA Profile

aaa authentication login default local
aaa authentication login <list> group <group> local
aaa authorization exec default local 
aaa authorization exec <list> group <group> local 
aaa authorization commands 15 default local 
aaa authorization commands 15 <list> group <group> local 
aaa accounting commands 15 <list> start-stop group <group>

VTY Login Profile

line vty 0 4
 authorization commands 15 <list>
 authorization exec <list>
 accounting commands 15 <list>
 login authentication <list>
 transport input ssh