API Guide

tacacs-server host
Configures a TACACS+ server and the key used to authenticate the switch on the server.
Syntax
tacacs-server host {hostname | ip-address} key {0 authentication-key | 9
authentication-key | authentication-key} [auth-port port-number]
Parameters
● hostname — Enter the host name of the TACACS+ server.
● ip-address — Enter the IPv4 (A.B.C.D) or IPv6 (x:x:x:x::x) address of the TACACS+ server.
● key 0 authentication-key — Enter an authentication key in plain text. A maximum of 42
characters.
● key 9 authentication-key — Enter an authentication key in encrypted format with a maximum
of 128 characters.
● authentication-key — Enter an authentication in plain text with a maximum of 42 characters. It
is not necessary to enter 0 before the key.
● key authentication-key — Enter a text string for the encryption key used to authenticate the
switch on the TACACS+ server. A maximum of 42 characters.
Default Not configured
Command Mode CONFIGURATION
Usage
Information
The authentication key must match the key configured on the TACACS+ server. You cannot enter spaces
in the key. The show running-configuration output displays both unencrypted and encrypted
keys in encrypted format. Configure the global timeout allowed for authentication requests on TACACS+
servers using the tacacs-server timeout command. By default, OS10 times out an authentication
attempt on a TACACS+ server after five seconds.
Supported on the MX9116n and MX5108n switches in Full Switch mode starting in release 10.4.0E(R3S).
Also supported in SmartFabric mode starting in release 10.5.0.1.
The no version of this command removes a TACACS+ server configuration.
Example
OS10(config)# tacacs-server host 1.5.6.4 key secret1
Supported
Releases
10.4.0E(R2) or later
tacacs-server timeout
Configures the global timeout used for authentication attempts on TACACS+ servers.
Syntax
tacacs-server timeout seconds
Parameters seconds — Enter the timeout period used to wait for an authentication response from a TACACS+
server, from 1 to 1000 seconds.
Default 5 seconds
Command Mode CONFIGURATION
Usage
Information
Supported on the MX9116n and MX5108n switches in Full Switch mode starting in release 10.4.0E(R3S).
Also supported in SmartFabric mode starting in release 10.5.0.1.
The no version of this command resets the TACACS+ server timeout to the default.
Example
OS10(config)# tacacs-server timeout 360
Supported
Releases
10.4.0E(R2) or later
Security 1037