Documentation Tacacs Devices Devices Device Fields Description

Device configuration example

  host = Router1 { # Router1 is a device name
    address = ""
    key = "cisco123"
    welcome banner = "Welcome to Router1!"
    motd banner = "Message of the day!"
    failed authentication banner = "Go away!"
    template = devGroup1
# here is manual configuration parameters
# use char # to make comment
  } #END OF DES-3028

Fields Description

Form Label Nametac_plus ParameterDescriptionImport/Variable nameImport/Value
device nameThe unique name of devicenamestring
Device GrouptemplateDevice inherit from Group tacacs key, banners and enable password , if any of these parameters is not setN/AN/A
addressUnique ip address of a new device. Select from Address Objectaddressone of:
  • address object id;
  • ipv4 address;
  • ipv6 address;
Tacacs Key
keyPre-Shared Key that used between tacacs server and the device (NAS)keystring
Enable PasswordenableDefault enable password for that deviceenablestring
Type of storing
N/ASelect how to store password: clear text or MD5. If you choose MD5, typed password will be converted to MD5 hash. If you choose MD5 (hashed), it will stored as MD5 hash without convertingenable_flagone of:
  • 0 - clear text
  • 1 - MD5 hash without converting
  • 2 - MD5 hash with converting
Banner Welcomewelcome bannerMessage before username/password promptbanner_welcomestring
Banner MOTDmotd bannerMessage displayed after successful loginbanner_motdstring
Banner Welcome failed authentication bannerMessage displayed after unsuccessful loginbanner_failedstring
Access / Access Control ListaclRestrict access to device by access list. Select one of predefined ACLaclOne of:
  • acl id
  • acl name
Access / Default User Groupdefault groupFor users without any group membership this directive may be used to assign oneuser_grouptacacs user group id
Access / Connection Timeoutconnection timeoutTerminate a connection to this NAS after an idle period of at least s seconds. Defaults to the global option.connection_timeoutseconds
Info / VendorN/AVendor informationvendorstring
Info / ModelN/AModel informationmodelstring
Info / TypeN/AType informationtypestring
Info / Serial Number N/ASerial numbersnstring
Manual ConfigurationN/AConfiguration parameters based on Marc Huber manual. It will added after main configurationmanualstring
DisabledN/AIf disabled is checked, device will disappear from tac_plus configuration filedisabled0 - enabled
1 - disabled