Configuring TACACS+ Settings

1. Navigate to Device > Users > Settings > Authentication.
2. Next to Configure TACACS+, click Configure.

   The TACACS Configuration page is displayed.

3. Under the Settings tab, do the following:

   1. Click Add Server. The Settings page displays.
   2. In the Host Name or IP Address field, enter the host name or IP address .
   3. In the Port field, enter the port number.
   4. In the Shared Secret and Confirm Shared Secret fields, enter the shared secret.

   5. If partition is configured, then select the Authentication Partition.

      Partition feature is not available in the TZ series. This feature is only supported in high-end devices from the NSa 2700 onwards.

   6. Click Save.
4. Under the Advanced tab, select Send Through VPN tunnel to send the requests across the VPN tunnel but it also binds these requests to X0 interface even if we have specified local network for site to site VPN.
5. Click Save.
6. Click on General Settings, do the following:
   1. In the TACACS Server Timeout (seconds) field, enter a maximum time out, in seconds.The default value is 5 seconds.
   2. In the Retries field, enter the maximum number of retries. The default value is 3 retries.
   3. Enable Support Single-Connect to connect Multiple TACACS+ sessions simultaneously and/or consecutively on a single TCP connection if both the daemon and client support this.

   4. Enable Periodically check TACACS servers that are down to periodically check TACACS servers that are down.

7. Click Save.