CLI Reference Guide-R04

Chapter 8 | User Authentication Commands
TACACS+ Client
– 242 –
tacacs-server host This command specifies the TACACS+ server and other optional parameters. Use
the no form to remove the server, or to restore the default values.
Syntax
tacacs-server index host host-ip-address [encrypted-key key] [key key]
[port port-number] [retransmit retransmit] [timeout timeout]
no tacacs-server index
index - The index for this server. (Range: 1)
host-ip-address - IPv4 or IPv6 address of a TACACS+ server.
encrypted-key - Encryption key in encrypted text used to authenticate
logon access for client. Enclose any string containing blank spaces in
double quotes. (Maximum length: 48 characters)
key - Encryption key in plain text used to authenticate logon access for
client. Enclose any string containing blank spaces in double quotes.
(Maximum length: 48 characters)
port-number - TACACS+ server TCP port used for authentication messages.
(Range: 1-65535)
retransmit - Number of times the switch will try to authenticate logon
access via the TACACS+ server. (Range: 1-30)
timeout - Number of seconds the switch waits for a reply before resending
a request. (Range: 1-540)
Default Setting
authentication port - 49
timeout - 5 seconds
retransmit - 2
Command Mode
Global Configuration
Example
Console(config)#tacacs-server 1 host 192.168.1.25 port 181 timeout 10
retransmit 5 key green
Console(config)#
tacacs-server timeout Sets the interval between sending authentication requests GC
show tacacs-server Shows the current TACACS+ settings PE
Table 41: TACACS+ Client Commands
Command Function Mode