apm aaa tacacsplus

apm aaa tacacsplus(1)	      BIG-IP TMSH Manual	 apm aaa tacacsplus(1)



NAME
       tacacsplus - Configure a TACACS+ server for implementing remote
       TACACS+-based client authentication.

MODULE
       apm aaa

SYNTAX
       Configure the tacacsplus component within the apm aaa module using the
       syntax shown in the following sections.

   CREATE/MODIFY
	create tacacsplus
	modify tacacsplus
	  options:
	    address [ip addr]
	    auth-service [arap | enable | fwproxy | login | nasi | none | ppp | pt | rcmd | x25]
	    auth-type [arap | ascii | chap | mschap | pap]
	    app-service [[string] | none]
	    description [[string]| none]
	    encrypt [enabled | disabled]
	    location-specific [true | false]
	    pool [[string]| none]
	    port [[string]| none]
	    priv-lvl [max | min | user]
	    protocol [atalk | deccp | ftp | http | ip | ipx | lat | lcp | osicp | pad | rlogin | telnet | tn3270 | unknown | vines | vpdn | xremote]
	    secret [[string]| none]
	    service [none | arap | connection | firewall | ppp | shell | slip | system | tty-daemon]
	    use-pool [[string]| none]

	edit tacacsplus | [glob] | [regex] ] ... ]
	  options:
	    all-properties
	    non-default-properties

   DISPLAY
	list tacacsplus
	list tacacsplus [ [ [name] | [glob] | [regex] ] ... ]
	  options:
	    all-properties
	    app-service
	    non-default-properties
	    one-line
	    partition

   DELETE
	delete tacacsplus [name]

DESCRIPTION
       You can use the tacacsplus component to create and manage a TACACS+
       authentication server.

EXAMPLES
       create tacacsplus mytacacs auth-service enable encrypt enabled
	    Creates a TACACS server named mytacacs with encryption enabled.

OPTIONS
       address
	    Specifies the IP address of the TACACS+ server. This option is
	    required.

       auth-service
	    Specifies the name of the service that the user is requesting to
	    be authenticated to use. This enables the TACACS+ server to behave
	    differently for different types of authentication requests. This
	    option is required.

       auth-type
	    Specifies the type of authentication to be used for authenticating
	    the user.

       app-service
	    Specifies the name of the application service to which the object
	    belongs. The default value is none. Note: If the strict-updates
	    option is enabled on the application service that owns the object,
	    you cannot modify or delete the object. Only the application
	    service can modify or delete the object.

       description
	    Specifies a unique description for the component. The default is
	    none.

       encrypt
	    Enables or disables encryption of TACACS+ packets. Recommended for
	    normal use. The default is enabled.

       location-specific
	    Specifies whether or not this object contains one or more
	    attributes with values that are specific to the location where the
	    BIG-IP device resides. The location-specific attribute is either
	    true or false. When using policy sync, mark an object as location-
	    specific to prevent errors that can occur when policies reference
	    objects, such as authentication servers, that are specific to a
	    certain location.

       [name]
	    Specifies the name of an AAA TACACS+ server. This option is
	    required.

       partition
	    Displays the partition within which the component resides.

       pool Specifies the name of the pool to which this server belongs. The
	    default is none.

       port Specifies the port number of the server. The default is 49.

       priv-lvl
	    Specifies the privilege level at which the user is authenticating.
	    The options are:

	    max
	    min  This is the default.

	    user
       protocol
	    Specifies the protocol associated with the value specified in the
	    service option, which is a subset of the associated service being
	    used for client authorization or system accounting. The default is
	    unknown.

       secret
	    Sets the secret key used to encrypt and decrypt packets sent or
	    received from the server. This option is required.

       service
       use-pool
	    Enables or disables the use of the pool specified using the pool
	    option. The default is none.

SEE ALSO
COPYRIGHT
       No part of this program may be reproduced or transmitted in any form or
       by any means, electronic or mechanical, including photocopying,
       recording, or information storage and retrieval systems, for any
       purpose other than the purchaser's personal use, without the express
       written permission of F5 Networks, Inc.

       F5 Networks and BIG-IP (c) Copyright 2011-2013. All rights reserved.



BIG-IP				  2014-10-27		 apm aaa tacacsplus(1)