Reference Guide

ipv4-address |
ipv6-address
Enter the IPv4 address (A.B.C.D) or IPv6 address (X:X:X:X::X) of the
TACACS+ server host.
port number (OPTIONAL) Enter the keyword port followed by a number as the
port to be used by the TACACS+ server. The range is zero (0) to 65535.
The default is 49.
timeout seconds (OPTIONAL) Enter the keyword timeout followed by the number of
seconds the switch waits for a reply from the TACACS+ server. The
range is 0 to 1000. The default is
10 seconds.
key key
(OPTIONAL) Enter the keyword key followed by a string up to 42
characters long as the authentication key. This authentication key
must match the key specified in the tacacs-server key for the
TACACS+ daemon.
Defaults Not configured.
Command Modes CONFIGURATION
Command History
Version 8.3.11.1 Introduced on the Z9000.
Version 8.4.1.0 Added support for IPv6.
Version 8.3.7.0 Introduced on the S4810.
Version 7.7.1.0 Authentication key length increased to 42 characters.
Version 7.6.1.0 Introduced on the S-Series.
Version 7.5.1.0 Introduced on the C-Series.
pre-Version
6.2.1.1
Introduced on the E-Series.
Usage
Information
To list multiple TACACS+ servers to be used by the aaa authentication login
command, configure this command multiple times.
If you are not configuring the switch as a TACACS+ server, you do not need to configure the
port, timeout and key optional parameters. If you do not configure a key, the key assigned
in the tacacs-server key command is used.
Related
Commands
aaa authentication login – specifies the login authentication method.
tacacs-server key – configures a TACACS+ key for the TACACS server.
tacacs-server key
Configure a key for communication between a TACACS+ server and a client.
C-Series, E-Series, S-Series, Z-Series, S4810
Syntax
tacacs-server key [encryption-type] key
To delete a key, use the no tacacs-server key key command.
1452