Juniper JUNOSE SOFTWARE 11.0.X - BROADBAND ACCESS CONFIGURATION GUIDE 4-1-2010 Configuration Manual page 361

login authentication
tacacs-server host
tacacs-server key
example, no line vty 6 causes the router to remove lines 6 through 19. You
cannot remove lines 0 through 4.
See line
Use to apply an authentication list to the vty lines you specified on your router.
Example
host1(config-line)#login authentication my_auth_list
Use the no version to specify that the router should use the default authentication
list.
See login authentication
Use to add or delete a host to or from the list of TACACS+ servers.
You can optionally specify a nondefault port number, a host-specific key, a single
connection and a timeout interval.
Use the primary keyword to assign the host as the primary host.
If a timeout value is specified, it overrides the global timeout value set with the
tacacs-server timeout command for this server only.
You can configure additional hosts by using this command. The designated
primary host is always the first in the search order; the remaining hosts are
contacted in the order in which they were created. If the primary host is deleted,
or if you modify the primary host without specifying the primary keyword, the
next host in the search order becomes the primary host. The search order is
maintained when the NAS is reloaded.
Example
host1(config)#tacacs-server host 192.168.1.27 port 10 timeout 3 key
your_secret primary
host1(config)#no tacacs-server host 192.168.1.27
Use the no version to delete the host from the list of TACACS+ servers.
See tacacs-server host
Use to set or reset the authentication encryption key value shared by all TACACS+
servers that do not have a server-specific key set up by the tacacs-server host
command.
This key must match the key configured on the TACACS+ process.
Leading spaces are ignored; however, spaces at the end of the key are recognized.
If you use spaces in the key, do not enclose the key in quotation marks.
Example
Chapter 9: Configuring TACACS+
Configuring TACACS+ Support
321