blob: b1f6472d7a67c2fc10ef450a0475c42c76f18ff6 [file] [log] [blame]
Thomas Vachuska8ca75a22017-08-24 16:12:59 -07001submodule openconfig-aaa-tacacs {
2
3 yang-version "1";
4
5 belongs-to "openconfig-aaa" {
6 prefix "oc-aaa";
7 }
8
9 // import some basic types
10 import ietf-inet-types { prefix inet; }
11 import openconfig-extensions { prefix oc-ext; }
12 import openconfig-aaa-types { prefix oc-aaa-types; }
13 import openconfig-types { prefix oc-types; }
14
15
16 // meta
17 organization "OpenConfig working group";
18
19 contact
20 "OpenConfig working group
21 www.openconfig.net";
22
23 description
24 "This module defines configuration and operational state data
25 related to the TACACS+ protocol for authentication,
26 authorization, and accounting.";
27
28 oc-ext:openconfig-version "0.2.0";
29
30 revision "2017-07-06" {
31 description
32 "Move to oc-inet types, add IETF attribution, add RADIUS
33 counters, changed password leaf names to indicate hashed";
34 reference "0.2.0";
35 }
36
37 revision "2017-01-29" {
38 description
39 "Initial public release";
40 reference "0.1.0";
41 }
42
43 // extension statements
44
45 // feature statements
46
47 // identity statements
48
49 identity TACACS {
50 base oc-aaa-types:AAA_SERVER_TYPE;
51 description
52 "Terminal Access Controller Access Control System (TACACS+)
53 AAA server";
54 reference
55 "The TACACS+ Protocol (draft-ietf-opsawg-tacacs-05)
56 RFC 1492 - An Access Control Protocol, Sometimes Called
57 TACACS";
58 }
59
60 // typedef statements
61
62 // grouping statements
63
64 grouping aaa-tacacs-server-config {
65 description
66 "Configuration data for a TACACS+ server";
67
68 leaf port {
69 type inet:port-number;
70 default 49;
71 description
72 "The port number on which to contact the TACACS server";
73 }
74
75 leaf secret-key {
76 type oc-types:routing-password;
77 description
78 "The unencrypted shared key used between the authentication
79 server and the device.";
80 }
81
82 leaf source-address {
83 type inet:ip-address;
84 description
85 "Source IP address to use in messages to the TACACS server";
86 }
87 }
88
89 grouping aaa-tacacs-server-state {
90 description
91 "Operational state data for a TACACS+ server";
92 }
93
94 grouping aaa-tacacs-server-top {
95 description
96 "Top-level grouping for TACACS+ sever data";
97
98 container tacacs {
99 description
100 "Top-level container for TACACS+ server data";
101
102 container config {
103 description
104 "Configuration data for TACACS+ server";
105
106 uses aaa-tacacs-server-config;
107 }
108
109 container state {
110
111 config false;
112
113 description
114 "Operational state data for TACACS+ server";
115
116 uses aaa-tacacs-server-config;
117 uses aaa-tacacs-server-state;
118 }
119 }
120 }
121
122 // data definition statements
123
124 // augment statements
125
126 // rpc statements
127
128 // notification statements
129
130}