Cisco CRS User Manual page 113

Authentication, Authorization, and Accounting Commands
Usage Guidelines
The key name entered must match the key used on the TACACS+ daemon. The key name applies to all servers
that have no individual keys specified. All leading spaces are ignored; spaces within and after the key are not.
If you use spaces in your key, do not enclose the key in quotation marks unless the quotation marks themselves
are part of the key.
The key name is valid only when the following guidelines are followed:
• The clear-text-key argument must be followed by the 0 keyword.
• The encrypted-key argument must be followed by the 7 keyword.
The TACACS server key is used only if no key is configured for an individual TACACS server. Keys
configured for an individual TACACS server always override this global key configuration.
Task ID
Task ID
aaa
Examples The following example sets the authentication and encryption key to key1:
RP/0/RP0/CPU0:router(config)# tacacs-server key key1
Related Commands
Command
key (TACACS+), on page 40
tacacs-server host, on page 99
OL-24740-01
Operations
read, write
Cisco IOS XR System Security Command Reference for the Cisco CRS Router, Release 4.1
Description
Specifies an authentication and encryption key shared
between the AAA server and the TACACS+ server.
Specifies a TACACS+ host.
tacacs-server key
103