document local clients

diff --git a/raddb/sites-available/tacacs b/raddb/sites-available/tacacs
index ca28ef3e9092ee51d42c950bd3acc9889ebae564..965d9d2b9bbe7ec1d51d08750cb3c6ab43e56865 100644 (file)
--- a/raddb/sites-available/tacacs
+++ b/raddb/sites-available/tacacs
@@ -201,6 +201,37 @@ server tacacs {
                }
        }
 
+       #
+       #  ## Clients
+       #
+       #  A virtual server can have multiple `client` definitions.  These clients take priority
+       #  over  the global `client` definitions.
+       #
+       #  See the main `clients.conf` file for documentation on the `client` section.
+       #
+       client tacacs {
+               ipaddr = 127.0.0.1
+
+               #
+               #  This has to be specified for all TACACS+ clients.
+               #
+               #  There is no standard for TACACS+ over UDP.
+               #
+               proto = tcp
+
+               #
+               #  The TACACS+ key, or secret.  If a secret is defined, then
+               #  it will be used.  All packets coming from this client MUST be
+               #  encrypted with the shared secret.
+               #
+               #  The `secret` configuration item can be omitted or deleted,
+               #  in which case all of the information (including passwords)
+               #  are sent over the network in the clear.  This practice is
+               #  not recommended.
+               #
+               secret = testing123
+       }
+
        #
        #  ## Authentication-Start
        #