sonic-system-tacacs YANG¶

概要¶

module: sonic-system-tacacs
namespace: http://github.com/sonic-net/sonic-system-tacacs
revision: 2021-04-15
import: ietf-inet-types, sonic-port, sonic-portchannel, sonic-loopback-interface, sonic-mgmt_port
top container: sonic-system-tacacs

Terminal Access Controller Access-Control System Plus (TACACS+) YANG module for SONiC OS.¹

データフロー (自動生成)¶

flowchart LR
  Y["sonic-system-tacacs"]
  C1[("CONFIG_DB<br/>TACPLUS")]
  Y --> C1
  D1["hostcfgd"]
  C1 --> D1
  C2[("CONFIG_DB<br/>TACPLUS_SERVER")]
  Y --> C2
  C2 --> D1

凡例

YANG モジュールから CONFIG_DB テーブル経由で subscribe する daemon/orch までを docs/reference/config-db-orch-map.md から機械生成したミニ図。詳細・例外は本ページ本文を参照。

auth_type_enumeration: pap, chap, mschap, login
key_encrypt_type: boolean, default false

ツリー¶

module: sonic-system-tacacs
  +--rw sonic-system-tacacs
     +--rw TACPLUS_SERVER
     |  +--rw TACPLUS_SERVER_LIST* [ipaddress]   (max-elements 8)
     |     +--rw ipaddress     inet:host
     |     +--rw priority?     uint8
     |     +--rw tcp_port?     inet:port-number
     |     +--rw timeout?      uint16
     |     +--rw auth_type?    auth_type_enumeration
     |     +--rw key_encrypt?  key_encrypt_type
     |     +--rw passkey?      string
     |     +--rw vrf?          string
     +--rw TACPLUS
        +--rw global
           +--rw auth_type?    auth_type_enumeration
           +--rw timeout?      uint16
           +--rw key_encrypt?  key_encrypt_type
           +--rw passkey?      string
           +--rw src_intf?     union

leaf 一覧¶

leaf	パス	型	必須	デフォルト	enum / 範囲 / leafref	説明
`ipaddress`	`sonic-system-tacacs/TACPLUS_SERVER/TACPLUS_SERVER_LIST/ipaddress`	`inet:host`	yes			TACACS+ server's Domain name or IP address (IPv4 or IPv6).
`priority`	`sonic-system-tacacs/TACPLUS_SERVER/TACPLUS_SERVER_LIST/priority`	`uint8`		`1`	range 1..64	Server selection priority; higher values are tried first.
`tcp_port`	`sonic-system-tacacs/TACPLUS_SERVER/TACPLUS_SERVER_LIST/tcp_port`	`inet:port-number`		`49`		TCP port used to communicate with this TACACS+ server.
`timeout`	`sonic-system-tacacs/TACPLUS_SERVER/TACPLUS_SERVER_LIST/timeout`	`uint16`		`5`	range 1..60	Per-server response timeout in seconds.
`auth_type`	`sonic-system-tacacs/TACPLUS_SERVER/TACPLUS_SERVER_LIST/auth_type`	`auth_type_enumeration`		`pap`	`pap`, `chap`, `mschap`, `login`	Per-server authentication protocol.
`key_encrypt`	`sonic-system-tacacs/TACPLUS_SERVER/TACPLUS_SERVER_LIST/key_encrypt`	`boolean`		`false`		Indicates whether the per-server passkey is stored encrypted.
`passkey`	`sonic-system-tacacs/TACPLUS_SERVER/TACPLUS_SERVER_LIST/passkey`	`string`			length 1..256, pattern `[^ #,]*`	Per-server shared secret overriding the global passkey.
`vrf`	`sonic-system-tacacs/TACPLUS_SERVER/TACPLUS_SERVER_LIST/vrf`	`string`			pattern `mgmt\\|default`	VRF used to reach this TACACS+ server.
`auth_type`	`sonic-system-tacacs/TACPLUS/global/auth_type`	`auth_type_enumeration`		`pap`	`pap`, `chap`, `mschap`, `login`	Default authentication protocol for TACACS+ communication.
`timeout`	`sonic-system-tacacs/TACPLUS/global/timeout`	`uint16`		`5`	range 1..60	Default timeout in seconds for TACACS+ server responses.
`key_encrypt`	`sonic-system-tacacs/TACPLUS/global/key_encrypt`	`boolean`		`false`		Indicates whether the global passkey is stored encrypted.
`passkey`	`sonic-system-tacacs/TACPLUS/global/passkey`	`string`			length 1..256, pattern `[^ #,]*`	Default shared secret for authenticating TACACS+ server communication.
`src_intf`	`sonic-system-tacacs/TACPLUS/global/src_intf`	`union`			leafref(PORT, PORTCHANNEL, LOOPBACK_INTERFACE, MGMT_PORT) or `Vlan<id>`	Source interface whose IP address is used for outgoing TACACS+ packets.

leafref / 依存¶

TACPLUS/global/src_intf → sonic-port, sonic-portchannel, sonic-loopback-interface, sonic-mgmt_port 各 LIST/name
TACPLUS_SERVER_LIST は最大 8 要素

augment / deviation¶

なし

sonic-system-tacacs YANG¶

概要¶

データフロー (自動生成)¶

関連ページ¶

対応 CONFIG_DB¶

関連 HLD¶

typedef¶

ツリー¶

leaf 一覧¶

leafref / 依存¶

augment / deviation¶

関連 CONFIG_DB / CLI¶

関連 YANG モジュール¶

関連リファレンス¶

引用元¶