Tacacs (Authentication and Accounting) Configuration in Juniper

set system tacplus-server 192.168.10.222 routing-instance mgmt_junos 

set system tacplus-server 192.168.10.222 secret tacpassword1

set system tacplus-server 192.168.10.222 single-connection

set system tacplus-server 192.168.10.222 source-address 192.168.0.4

2. Configure authentication order (if tacacs cannot authenticate, will ask for local access user1)

set system authentication-order tacplus

set system authentication-order password

set system accounting events login

set system accounting events change-log

set system accounting events interactive-commands
set system accounting destination tacplus server 192.168.10.222 secret tacpassword1
set system accounting destination tacplus server 192.168.10.222 single-connection
set system accounting destination tacplus server 192.168.10.222 source-address 192.168.0.4

set firewall family inet filter IPv4-FIREWALL term TACACS-PERMIT from source-prefix-list TACACS-SERVERS

set firewall family inet filter IPv4-FIREWALL term TACACS-PERMIT from protocol tcp

set firewall family inet filter IPv4-FIREWALL term TACACS-PERMIT from source-port tacacs

set firewall family inet filter IPv4-FIREWALL term TACACS-PERMIT then count TACACS-PERMIT

set firewall family inet filter IPv4-FIREWALL term TACACS-PERMIT then accept

set firewall policer tacacs-policer if-exceeding bandwidth-limit 1m

set firewall policer tacacs-policer if-exceeding burst-size-limit 10k

set firewall policer tacacs-policer then discard