Setting The Global Secret Key; Setting The Timeout Value - HP Cisco MDS 9020 - Fabric Switch Configuration Manual

Configuring TACACS+
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
Command
Step 3
switch(config)# tacacs-server host
host1.cisco.com port 2
switch(config)# no tacacs-server host
host1.cisco.com port 2
Step 4
switch(config)# tacacs-server host
host1.cisco.com key MyKey
Step 5
switch(config)# tacacs-server host
host1.cisco.com timeout 25

Setting the Global Secret Key

You can configure global values for the secret key for all TACACS+ servers.
If secret keys are configured for individual servers, those keys override the globally configured key.
Note
You can use the dollar sign ($) and the percent sign (%) in global secret keys.
Note
To set the secret key for TACACS+ servers, follow these steps:
Command
Step 1
switch# config t
Step 2
switch(config)# tacacs-server key
7 3sdaA3daKUngd
switch(config)# no tacacs-server
key oldPword

Setting the Timeout Value

You can configure a global timeout value between transmissions for all TACACS+ servers.
If timeout values are configured for individual servers, those values override the globally configured
Note
values.
Cisco MDS 9000 Family CLI Configuration Guide
32-20
Chapter 32
Purpose
Configures the TCP port for all TACACS+ requests.
Reverts to the factory default of using port 49 for server
access.
Configures the TACACS+ server identified by the
specified domain name and assigns the secret key.
Configures the timeout period for the switch to wait for a
response from the specified server before it declares a
timeout failure.
Purpose
Enters configuration mode.
Assigns the global secret key (in encrypted format) to access
the TACACS+ server. This example specifies 7 to indicate the
encrypted format being used. If this global key and the
individual server keys are not configured, clear text messages
are sent to the TACACS+ server(s).
Deletes the configured global secret key to access the
TACACS+ server and reverts to the factory default of allowing
access to all configured servers.
OL-16184-01, Cisco MDS SAN-OS Release 3.x
Configuring RADIUS and TACACS+