Connectivity Guide

Parameters
● hostname — Enter the host name of the TACACS+ server.
● ip-address — Enter the IPv4 (A.B.C.D) or IPv6 (x:x:x:x::x) address of the TACACS+ server.
● key 0 authentication-key — Enter an authentication key in plain text. A maximum of 42
characters.
● key 9 authentication-key — Enter an authentication key in encrypted format. . A maximum of
128 characters.
● authentication-key — Enter an authentication in plain text. . A maximum of 42 characters. It is
not necessary to enter 0 before the key.
● key authentication-key — Enter a text string for the encryption key used to authenticate the
switch on the TACACS+ server. A maximum of 42 characters.
Default Not configured
Command Mode CONFIGURATION
Usage
Information
The authentication key must match the key configured on the TACACS+ server. You cannot enter spaces
in the key. The show running-configuration output displays both unencrypted and encrypted
keys in encrypted format. Configure the global timeout allowed for authentication requests on TACACS+
servers using the tacacs-server timeout command. By default, OS10 times out an authentication
attempt on a TACACS+ server after five seconds. The no version of this command removes a TACACS+
server configuration.
Example
OS10(config)# tacacs-server host 1.5.6.4 key secret1
Supported
Releases
10.4.0E(R2) or later
tacacs-server timeout
Configures the global timeout used for authentication attempts on TACACS+ servers.
Syntax
tacacs-server timeout seconds
Parameters seconds — Enter the timeout period used to wait for an authentication response from a TACACS+
server, from 1 to 1000 seconds.
Default 5 seconds
Command Mode CONFIGURATION
Usage
Information
The no version of this command resets the TACACS+ server timeout to the default.
Example
OS10(config)# tacacs-server timeout 360
Supported
Releases
10.4.0E(R2) or later
tacacs-server vrf
Creates an association between a TACACS server group and a VRF and source interface.
Syntax
tacacs-server vrf {management | vrf-name}
Parameters
● management — Enter the keyword to associate TACACS servers to the management VRF instance.
This option restricts the TACACS server association to the management VRF only.
● vrf-name — Enter the keyword then the name of the VRF to associate TACACS servers with that
VRF.
Defaults None.
Command Mode CONFIGURATION
786 Security