Cisco Cisco Packet Data Interworking Function (PDIF) Prospecto
TACACS+ Configuration Mode Commands
▀ on-authen-fail
▄ Cisco ASR 5x00 Command Line Interface Reference
8380
on-authen-fail
Defines system behavior when an administrative login fails due to a TACACS+ authentication failure. This command
also can be used to configure system behavior separately for TACACS+ authentication failures for administrative users
accessing the system via the StarOS Console port.
also can be used to configure system behavior separately for TACACS+ authentication failures for administrative users
accessing the system via the StarOS Console port.
Product
All
Privilege
Security Administrator, Administrator
Mode
Exec > Global Configuration > TACACS+ Configuration
configure > tacacs mode
Entering the above command sequence results in the following prompt:
[local]host_name(config-tacacs)#
Syntax
on-authen-fail { continue | stop } [ tty console ]
{ continue | stop }
Specifies the type of authentication behavior to enforce:
continue
: After a TACACS+ authentication failure, the system will continue with authentication
using non-TACACS+ authentication services.
stop
: After a TACACS+ authentication failure, the system forces the failed TACACS+ user to exit.
tty console
Release 12 and later systems only: Used after the
stop
or
continue
parameters to specify system behavior
for users being authenticated via the StarOS Console port:
stop tty console
: Forces the failed TACACS+ user to exit.
continue tty console
: The system will continue with authentication using non-TACACS+
authentication services.
Usage
Use this command to configure system behavior for users that fail TACACS+ authentication.
Example
The following command instructs the system to stop upon TACACS+ authentication failure:
on-authen-fail stop