Add Tacacs User Group configure new tacacs user group inside tacacs gui

Tacacs User Groups. Add New Tacacs User Group

---

• Add New Tacacs User Group Tabs

  • General Tab

  • Message Tab

  • Access Rules Tab

  • Manual Tab

---

Feild	Description
Name it should be unique and you can change it later	(Required!) The unique group name.
Enable Password	Enable password for that group. The enable password can be stored in clear text (0) or md5 hash (1).

The message that will appeared after user log in.

More info about special characters you can find here.

Field	Description
Privilege Level Unset default 15, if Undefined it will not appeared in configuration	Privilege level settings
Access Control List acl_1 acl_3 acl_3 select ACL	Here you can set pre-configured tacacs Access Control List (ACL), to restrict access for specific ip addresses. How to add new tacacs ACL?
Access Service service_1 service_3 service_3 select service	Here you can define service for the group of users. Service used for restrict access inside the device, it is a part of authorization. You can restrict access inside of device (after log in) with service. Every vendor has your own parameters of service attributes. How to define new tacacs service?
Default service	If checked the default service for that group will permited.
Valid From	Date of the group of users access begin. The user access will be restricted before that date.
Valid Until	Date of the group of users access end. The user access will be restricted after that date.
Client (NAC) IP Address restrict access, only from specified ip address(es). It should be in sort of <ip address>/<prefix>	Fast way to restrict access without acl, only if user will be with that ip address or inside that network access will be allowed.
NAS IP Address restrict access, only to specified NAS ip address(es). It should be in sort of <ip address>/<prefix>	Fast way to restrict access without acl, allow user access to device or network only.

Here you can define manual settings for new group. More info you can find here.

---