Administrator Guide

Security Commands 961
• hostname — The hostname of the TACACS+ server. (Range: 1-255
characters).
Default Configuration
No TACACS+ host is specified.
Command Mode
Global Configuration mode
User Guidelines
To specify multiple hosts, multiple tacacs-server host commands can be used.
TACACS servers are keyed by the host name, therefore it is advisable to use
unique host names.
Example
The following example specifies a TACACS+ host.
console(config)#tacacs-server host 172.16.1.1
console(tacacs)#
tacacs-server key
Use the tacacs-server key command in Global Configuration mode to set the
authentication and encryption key for all TACACS+ communications
between the switch and the TACACS+ daemon. To disable the key, use the
no form of this command.
Syntax
tacacs-server key [ 0 | 7 ][ key-string ]
no tacacs-server key
• 0—The key string that follows is the unencrypted shared secret. The
length is 1–256 characters.
• 7—The key string that follows is the encrypted shared secret. the length is
32 characters.
2CSNXXX_SWUM204.book Page 961 Monday, January 25, 2016 1:25 PM