tacacs

AsterNOS Model for TACACS+

module: asternos-tacacs
  +--rw tacacs
     +--rw servers
     |  +--rw server* [ip]
     |     +--rw ip               inet:ip-address-no-zone
     |     +--rw auth-type?       enumeration
     |     +--rw timeout?         uint32
     |     +--rw shared-secret?   string
     |     +--rw port?            uint32
     |     +--rw priority?        uint32
     |     +--rw vrf?             string
     +--rw global
        +--rw timeout?         uint32
        +--rw shared-secret?   string
        +--rw auth-type?       enumeration

  rpcs:
    +---x show-tacacs
    |  +--ro output
    |     +--ro data
    |        +--ro global-result?   string
    |        +--ro server-result?   string
    +---x show-tacacs-server-status
       +--ro output
          +--ro data?   <anydata>

Resources

Resource List

Path	Access
/tacacs	Read-Write
/tacacs/servers	Read-Write
/tacacs/servers/server	Read-Write
/tacacs/servers/server/ip	Read-Write
/tacacs/servers/server/auth-type	Read-Write
/tacacs/servers/server/timeout	Read-Write
/tacacs/servers/server/shared-secret	Read-Write
/tacacs/servers/server/port	Read-Write
/tacacs/servers/server/priority	Read-Write
/tacacs/servers/server/vrf	Read-Write
/tacacs/global	Read-Write
/tacacs/global/timeout	Read-Write
/tacacs/global/shared-secret	Read-Write
/tacacs/global/auth-type	Read-Write

Detailed Nodes

/tacacs

Path

/tacacs

Node Type

container

Description

Tacacs+ configuration

Access

Read-Write

/tacacs/servers

Path

/tacacs/servers

Node Type

container

Access

Read-Write

/tacacs/servers/server

Path

/tacacs/servers/server

Node Type

list

Access

Read-Write

/tacacs/servers/server/ip

Path

/tacacs/servers/server/ip

Node Type

leaf

Description

TACACS+ server ip

Access

Read-Write

Data Type

Constraints

Multiple constraints:

• An IPv6 address without a zone index. This type, derived from the type ipv6-address, may be used in situations where the zone is known from the context and no zone index is needed.
• An IPv4 address without a zone index. This type, derived from the type ipv4-address, may be used in situations where the zone is known from the context and no zone index is needed.

/tacacs/servers/server/auth-type

Path

/tacacs/servers/server/auth-type

Node Type

leaf

Description

TACACS+ server authentication type

Access

Read-Write

Data Type

Constraints

Enumeration with options:

• chap
• pap
• mschap
• login

/tacacs/servers/server/timeout

Path

/tacacs/servers/server/timeout

Node Type

leaf

Description

TACACS+ server transmission timeout interval

Access

Read-Write

Data Type

Constraints

Valid range: 0 to 60

/tacacs/servers/server/shared-secret

Path

/tacacs/servers/server/shared-secret

Node Type

leaf

Description

TACACS+ server shared secret

Access

Read-Write

Data Type

/tacacs/servers/server/port

Path

/tacacs/servers/server/port

Node Type

leaf

Description

TACACS+ server port

Access

Read-Write

Data Type

Constraints

Valid range: 1 to 65535

/tacacs/servers/server/priority

Path

/tacacs/servers/server/priority

Node Type

leaf

Description

TACACS+ server priority value

Access

Read-Write

Data Type

Constraints

Valid range: 1 to 64

/tacacs/servers/server/vrf

Path

/tacacs/servers/server/vrf

Node Type

leaf

Description

VRF name

Access

Read-Write

Data Type

/tacacs/global

Path

/tacacs/global

Node Type

container

Access

Read-Write

/tacacs/global/timeout

Path

/tacacs/global/timeout

Node Type

leaf

Description

TACACS+ server global transmission timeout interval

Access

Read-Write

Data Type

Constraints

Valid range: 0 to 60

/tacacs/global/shared-secret

Path

/tacacs/global/shared-secret

Node Type

leaf

Description

TACACS+ server global shared secret

Access

Read-Write

Data Type

/tacacs/global/auth-type

Path

/tacacs/global/auth-type

Node Type

leaf

Description

TACACS+ server global authentication type

Access

Read-Write

Data Type

Constraints

Enumeration with options:

• chap
• pap
• mschap
• login