Dell N3200-ON Networking N-Series Switches User Guide version 6.8.0 - Page 281

3 The following command is the first step in defining a TACACS+ server at IP address 1.2.3.4. The result of this command is to place the user in tacacs-server mode to allow further configuration of the server: console(config)#tacacs-server host 1.2.3.4 4 Define the shared secret. This must be the same as the shared secret defined on the TACACS+ server: console(config-tacacs)#key "secret" console(config-tacacs)#exit 5 Enter the configuration mode for the Telnet line. console(config)#line telnet 6 Assign the tacplus login authentication method list to be used for users accessing the switch via Telnet: console(config-telnet)#login authentication tacplus 7 Assign the tacp enable authentication method list to be used for users executing the enable command when accessing the switch via Telnet: console(config-telnet)#enable authentication tacp console(config-telnet)#exit NOTE: A user logging in with this configuration would be placed in User Exec mode with privilege level 1. To access Privileged Exec mode with privilege level 15, use the enable command. NOTE: Dell Networking TACACS supports setting the maximum user privilege level in the authorization response. Configure the TACACS server to send priv-lvl=X, where X is either 1 (Non-privileged mode), or 15 (Privileged mode). Public Key SSH Authentication Example The following is an example of a public key configuration for SSH login. Using a tool such as putty and a private/public key infrastructure, one can enable secure login to the Dell Networking N-Series switch without a password. Instead, a public key is used with a private key kept locally on the administrator's computer. The public key can be placed on multiple devices, allowing the administrator secure access without needing to remember multiple passwords. It is strongly recommended that the private key be protected with a password. Authentication, Authorization, and Accounting 281