Command Reference Guide

TACACS+ Commands
CLI Command Reference
September 2014 Page 129
HP Moonshot Switch Module CLI Command Reference
tacacs-server key
Use the tacacs-server key command to set the authentication and encryption key for all TACACS+
communications between the switch and the TACACS+ daemon. The
key-string parameter has a range of 0 -
128 characters and specifies the authentication and encryption key for all TACACS communications between
the switch and the TACACS+ server. This key must match the key used on the TACACS+ daemon.
Text-based configuration supports TACACS server’s secrets in encrypted and non-encrypted format. When you
save the configuration, these secret keys are stored in encrypted format only. If you want to enter the key in
encrypted format, enter the key along with the encrypted keyword. In the show running config command’s
display, these secret keys are displayed in encrypted format. You cannot show these keys in plain text format.
no tacacs-server key
Use the no tacacs-server key command to disable the authentication and encryption key for all TACACS+
communications between the switch and the TACACS+ daemon. The
key-string parameter has a range of 0 -
128 characters This key must match the key used on the TACACS+ daemon.
tacacs-server keystring
Use the tacacs-server keystring command to set the global authentication encryption key used for all
TACACS+ communications between the TACACS+ server and the client.
Example: The following shows an example of the CLI command.
(Routing)(Config)#tacacs-server keystring
Enter tacacs key:********
Re-enter tacacs key:********
Format
tacacs-server key [key-string | encrypted key-string]
Mode Global Config
Format
no tacacs-server key key-string
Mode Global Config
Format
tacacs-server keystring
Mode Global Config