Configuring the TACACS+ server for single login

For the single login feature to work correctly you must check some entries in the User Setup on the TACACS+ server:

Procedure
  1. In the User Setup, scroll to the Advanced TACACS+ Settings section.
  2. Make sure the radio button for "Max Privilege for any AAA Client" is checked and the level is set to 15, as shown in Advanced TACACS+ settings section of the TACACS+ server user setup.
  3. Privileges are represented by the numbers 0 through 15, with zero allowing only operator privileges (and requiring two logins) and 15 representing root privileges. The root privilege level is the only level that allows manager level access on the switch.
    Advanced TACACS+ settings section of the TACACS+ server user setup
  4. Scroll down to the section that begins with "Shell", see The shell section of the TACACS+ server user setup. Check the Shell box.
  5. Check the Privilege level box and set the privilege level to 15 to allow "root" privileges. This allows you to use the single login option.
    The shell section of the TACACS+ server user setup

As shown in Configuring the switch TACACS+ server access, login and enable access is always available locally through a direct terminal connection to the switch console port. However, for Telnet access, you can configure TACACS+ to deny access if a TACACS+ server goes down or otherwise becomes unavailable to the switch.