Server-Private (Tacacs+) - Cisco NCS 5000 Series Manual

server-private (TACACS+)

server-private (TACACS+)
To configure the IP address of the private TACACS+ server for the group server, use the server-private
command in TACACS+ server-group configuration mode. To remove the associated private server from the
AAA group server, use the no form of this command.
server-private {hostname| ip-address} [port port-number] [timeout seconds] [key string]
no server-private {hostname| ip-address}
Syntax Description
hostname
ip-address
port port-number
timeout seconds
key string
Command Default
The port-name argument, if not specified, defaults to the standard port 49.
The seconds argument, if not specified, defaults to 5 seconds.
Command Modes
TACACS+ server-group configuration
Command History
Release
Release 6.0
Usage Guidelines
Use the server-private command to associate a particular private server with a defined server group. Possible
overlapping of IP addresses between VRF instances are permitted. Private servers (servers with private
addresses) can be defined within the server group and remain hidden from other groups, while the servers in
the global pool (for example, default tacacs+ server group) can still be referred by IP addresses and port
System Security Command Reference for Cisco NCS 5000 Series Routers
58
Character string used to name the server host.
IP address of the TACACS+ server host. Both IPv4 and IPv6 addresses are supported.
(Optional) Specifies a server port number. This option overrides the default, which
is port 49. Valid port numbers range from 1 to 65535.
(Optional) Specifies, in seconds, a timeout value that sets the length of time the
authentication, authorization, and accounting (AAA) server waits to receive a
response from the TACACS+ server. This option overrides the global timeout value
set with the tacacs-server timeout command for only this server. The range is from
1 to 1000. The default is 5.
(Optional) Specifies the authentication and encryption key that is used between the
router and the TACACS+ daemon running on the TACACS+ server. This key
overrides the global setting of the tacacs-server key command. If no key string is
specified, the global value is used.
Authentication, Authorization, and Accounting Commands
Modification
This command was introduced.