Users Guide

Security Commands 1059
Example
The following example specifies a TACACS+ host.
console(config)#tacacs-server host 172.16.1.1
console(config-tacacs)#
tacacs-server key
Use the tacacs-server key command in Global Configuration mode to set the
authentication and encryption key for all TACACS+ communications
between the switch and the TACACS+ daemon. To disable the key, use the
no form of this command.
Syntax
tacacs-server key [ 0 | 7 ][key-string]
no tacacs-server key
• 0—The key string that follows is the unencrypted shared secret. The
length is 1–128 characters.
• 7—The key string that follows is the encrypted shared secret. The length is
fixed at 256 characters.
• key-string — Specifies the key string in encrypted or unencrypted form. It
may be up to 128 characters in length in unencrypted format and is exactly
256 characters in length in encrypted format.
Default Configuration
The default is an empty string.
Command Mode
Global Configuration mode
User Guidelines
The tacacs-server key command accepts any printable characters for the key
except a question mark. Enclose the string in double quotes to include spaces
within the key. The surrounding quotes are not used as part of the name. The
CLI does not filter illegal characters and may accept entries up to the first
illegal character or reject the entry entirely.