Administrator Guide

Security Commands 957
key
Use the key command in TACACS Configuration mode to specify the
authentication and encryption key for all TACACS communications between
the device and the TACACS server. This key must match the key used on the
TACACS daemon.
Syntax
key [ 0 | 7 | encrypted ] key-string ]
no key
• 0—The key string that follows is the unencrypted shared secret. The
length is 1–256 characters.
• 7—The key string that follows is the encrypted shared secret. the length is
32 characters.
• encrypted—The key string that follows is the encrypted shared secret.
Length 32 characters.
•
key-string — Specifies the key string in encrypted or unencrypted form. It
may be up to 256 characters in length in unencrypted format and 32
characters in length in encrypted format. (Range 1-256 characters)
Default Configuration
If left unspecified, the key-string parameter defaults to the global value.
Command Mode
TACACS Configuration mode
User Guidelines
The key command accepts any printable characters for the key except a
question mark. Enclose the string in double quotes to include spaces within
the key. The surrounding quotes are not used as part of the name. The CLI
does not filter illegal characters and may accept entries up to the first illegal
character or reject the entry entirely.
– timeout
2CSNXXX_SWUM204.book Page 957 Monday, January 25, 2016 1:25 PM