Selamat malam,
Hari ini saya akan berbagi cara config autentikasi perangkat jaringan menggunakan tacac.
adapun config yang akan saya share disini yaitu config perangkat CIENA, CISCO dan Juniper.
Berikut konfigurasinya:
CIENA
tacacs add server xx.xx.xx.xx
tacacs set keyminlen 6
tacacs set key x.x.x.x
tacacs authorization enable
tacacs accounting enable
tacacs accounting set command on
tacacs accounting set session on
tacacs syslog enable
user auth set priority 1 method tacacs
user auth set priority 2 method local
CISCO
aaa new-model
aaa authentication login default group tacacs+ local
aaa authentication enable default group tacacs+ enable
aaa authorization commands 5 default group tacacs+ none
aaa authorization commands 15 default group tacacs+ none
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 0 default start-stop group tacacs+
aaa accounting commands 1 default start-stop group tacacs+
aaa accounting commands 2 default start-stop group tacacs+
aaa accounting commands 3 default start-stop group tacacs+
aaa accounting commands 4 default start-stop group tacacs+
aaa accounting commands 5 default start-stop group tacacs+
aaa accounting commands 6 default start-stop group tacacs+
aaa accounting commands 7 default start-stop group tacacs+
aaa accounting commands 8 default start-stop group tacacs+
aaa accounting commands 9 default start-stop group tacacs+
aaa accounting commands 10 default start-stop group tacacs+
aaa accounting commands 11 default start-stop group tacacs+
aaa accounting commands 12 default start-stop group tacacs+
aaa accounting commands 13 default start-stop group tacacs+
aaa accounting commands 14 default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
aaa accounting network default start-stop group tacacs+'
aaa session-id common
tacacs-server host x.x.x.x
tacacs-server key xxxx
Juniper
set system login user remote uid 2001
set system login user remote class super-user
set system authentication-order tacplus
set system authentication-order password
set system tacplus-server xx.xx.xx.xx port 49
set system tacplus-server xx.xx.xx.xx secret "xx.xx.xx.xx"
set system tacplus-server xx.xx.xx.xx single-connection
set system tacplus-server xx.xx.xx.xx source-address xx.xx.xx.xx
set system accounting events login
set system accounting events change-log
set system accounting destination tacplus server xx.xx.xx.xx source-address xx.xx.xx.xx
set system syslog file messages any notice
set system syslog file messages authorization info
set system syslog file interactive-commands interactive-commands any
set system processes general-authentication-service traceoptions file radius-log
set system processes general-authentication-service traceoptions file match <xx.xx.xx.xx>
set system processes general-authentication-service traceoptions flag radius