Send comments to nx5000-docfeedback@cisco.com
6-136
Cisco Nexus 5000 Series Command Reference
OL-16599-01
Chapter 6 Security Commands
tacacs-server host
tacacs-server host
To configure TACACS+ server host parameters, use the tacacs-server host command. To revert to the
defaults, use the no form of this command.
tacacs-server host {hostname | ipv4-address | ipv6-address} [key [0 | 7] shared-secret]
[port port-number] [test {idle-time time | password password | username name}]
[timeout seconds]
no tacacs-server host {hostname | ipv4-address | ipv6-address} [key [0 | 7] shared-secret]
[port port-number] [test {idle-time time | password password | username name}]
[timeout
seconds]
Syntax Description
Command Default Idle time: disabled.
Server monitoring: disabled.
Timeout: 1 second.
Test username: test.
Test password: test.
hostname TACACS+ server Domain Name Server (DNS) name. The maximum
character size is 256.
ipv4-address TACACS+ server IPv4 address in the A.B.C.D format.
ipv6-address TACACS+ server IPv6 address in the X:X:X::X format.
key (Optional) Configures the TACACS+ server's shared secret key.
0 (Optional) Configures a preshared key specified in clear text (indicated by 0)
to authenticate communication between the TACACS+ client and server.
This is the default.
7 (Optional) Configures a preshared key specified in encrypted text (indicated
by 7) to authenticate communication between the TACACS+ client and
server.
shared-secret Configures a preshared key to authenticate communication between the
TACACS+ client and server. The maximum length is 63 characters.
port port-number (Optional) Configures a TACACS+ server port for authentication. The range
is from 1 to 65535.
test (Optional) Configures parameters to send test packets to the TACACS+
server.
idle-time time (Optional) Specifies the time interval (in minutes) for monitoring the server.
The time range is 1 to 1440 minutes.
password password (Optional) Specifies a user password in the test packets. The maximum size
is 32.
username name (Optional) Specifies a user name in the test packets. The maximum size is 32.
timeout seconds (Optional) Configures a TACACS+ server timeout period (in seconds)
between retransmissions to the TACACS+ server. The range is from 1 to 60
seconds.