Tacacs-Server Host - Cisco CRS User Manual

Authentication, Authorization, and Accounting Commands

tacacs-server host

To specify a TACACS+ host server, use the tacacs-server host command. To delete the specified name or
address, use the no form of this command.
tacacs-server host host-name [port port-number] [timeout seconds] [key [0| 7] auth-key]
[single-connection]
no tacacs-server host host-name [port port-number]
Syntax Description
host-name
port port-number
timeout seconds
key [0 | 7] auth-key
single-connection
Command Default
No TACACS+ host is specified.
The port-name argument, if not specified, defaults to the standard port 49.
The seconds argument, if not specified, defaults to 5 seconds.
Command Modes
Global configuration mode
OL-24740-01
Host or domain name or IP address of the TACACS+ server.
(Optional) Specifies a server port number. This option overrides the default, which is
port 49. Valid port numbers range from 1 to 65535.
(Optional) Specifies a timeout value that sets the length of time the authentication,
authorization, and accounting (AAA) server waits to receive a response from the
TACACS+ server. This option overrides the global timeout value set with the
tacacs-server timeout command for this server only. The valid timeout range is from
1 to 1000 seconds. Default is 5.
Note: You can use this parameter only in the config-tacacs-host sub-mode.
(Optional) Specifies an authentication and encryption key shared between the AAA
server and the TACACS+ server. The TACACS+ packets are encrypted using this key.
This key must match the key used by the TACACS+ daemon. Specifying this key
overrides the key set by the tacacs-server keycommand for this server only.
(Optional) Entering 0 specifies that an unencrypted (clear-text) key follows.
(Optional) Entering 7 specifies that an encrypted key follows.
The auth-key argument specifies the unencrypted key between the AAA server and
the TACACS+ server.
Note: You can use this parameter only in the config-tacacs-host sub-mode.
(Optional) Multiplexes all TACACS+ requests to this server over a single TCP
connection. By default, a separate connection is used for each session.
Note: You can use this parameter only in the config-tacacs-host sub-mode.
Cisco IOS XR System Security Command Reference for the Cisco CRS Router, Release 4.1
tacacs-server host
99