Command Reference Guide

TACACS+ Commands
CLI Command Reference
September 2014 Page 131
HP Moonshot Switch Module CLI Command Reference
no tacacs-server timeout
Use the no tacacs-server timeout command to restore the default global timeout value for TACACS servers.
TACACS+ servers that do not use the global timeout will retain their configured timeout values.
key
Use the key command in TACACS Configuration mode to specify the authentication and encryption key for all
TACACS communications between the device and the TACACS server. This key must match the key used on the
TACACS daemon. The
key-string parameter specifies the key name. For an empty string use “ ”. (Range: 0 - 128
characters).
Text-based configuration supports TACACS server’s secrets in encrypted and non-encrypted format. When you
save the configuration, these secret keys are stored in encrypted format only. If you want to enter the key in
encrypted format, enter the key along with the encrypted keyword. In the show running config command’s
display, these secret keys are displayed in encrypted format. You cannot show these keys in plain text format.
keystring
Use the keystring command in TACACS Server Configuration mode to set the TACACS+ server-specific
authentication encryption key used for all TACACS+ communications between the TACACS+ server and the
client.
Example: The following shows an example of the command.
(Routing)(Config)#tacacs-server host 1.1.1.1
(Routing)(Tacacs)#keystring
Enter tacacs key:********
Re-enter tacacs key:********
Format
no tacacs-server timeout
Mode Global Config
Format
key [key-string | encrypted key-string]
Mode TACACS Config
Format
keystring
Mode TACACS Server Config