Tacacs-Server Key; Tacacs-Server Keystring - NETGEAR M6100 Series Reference Manual

no tacacs-server host
Use the no tacacs-server host command to delete the specified hostname or IP
address. The ip-address or hostname argument is the IP address or host name of the
TACACS+ server.
Format
no tacacs-server host {ip-address | hostname}
Mode Global Config

tacacs-server key

Use the tacacs-server key command to set the authentication and encryption key for all
TACACS+ communications between the switch and the TACACS+ daemon. The
key-string parameter has a range of 0–128 characters and specifies the authentication
and encryption key for all TACACS communications between the switch and the TACACS+
server. This key must match the key used on the TACACS+ daemon.
Text-based configuration supports TACACS server's secrets in encrypted and non-encrypted
format. When you save the configuration, these secret keys are stored in encrypted format
only. If you want to enter the key in encrypted format, enter the key along with the encrypted
keyword. In the output of the show running-config command (for information about the
command, see show running-config
encrypted format. You cannot show these keys in plain text format.
Format
tacacs-server key [key-string | encrypted key-string]
Mode Global Config
no tacacs-server key
Use the no tacacs-server key command to disable the authentication and encryption
key for all TACACS+ communications between the switch and the TACACS+ daemon. The
key-string parameter has a range of 0–128 characters This key must match the key used
on the TACACS+ daemon.
Format
no tacacs-server key key-string
Mode Global Config

tacacs-server keystring

Use the tacacs-server keystring command to set the global authentication encryption
key used for all TACACS+ communications between the TACACS+ server and the client.
Format
tacacs-server keystring
Mode Global Config
The following shows an example of the CLI command.
M6100 Series Switches
on page 171), these secret keys are displayed in
Management Commands
134