numbers. Therefore, the list of servers in server groups includes references to the hosts in the global
configuration and the definitions of private servers.
Task ID
OperationsTask ID
read, writeaaa
Examples
This example shows how to define the myserver TACACS+ group server, to associate private servers with
it, and to enter TACACS+ server-group private configuration mode:
RP/0/RP0/CPU0:router# configure
RP/0/RP0/CPU0:router(config)# aaa group server tacacs+ myserver
RP/0/RP0/CPU0:router(config-sg-tacacs+)# server-private 10.1.1.1 timeout 5
RP/0/RP0/CPU0:router(config-sg-tacacs+)# server-private 10.1.1.1 key a_secret
RP/0/RP0/CPU0:router(config-sg-tacacs+)# server-private 10.1.1.1 port 51
RP/0/RP0/CPU0:router(config-sg-tacacs-private)# exit
RP/0/RP0/CPU0:router(config-sg-tacacs+)# server-private 10.2.2.2 timeout 5
RP/0/RP0/CPU0:router(config-sg-tacacs+)# server-private 10.2.2.2 key coke
RP/0/RP0/CPU0:router(config-sg-tacacs+)# server-private 10.2.2.2 port 300
RP/0/RP0/CPU0:router(config-sg-tacacs-private)#
Related Commands
DescriptionCommand
Groups different TACACS+ server hosts into distinct
lists and distinct methods.
aaa group server tacacs+, on page 22
Sets the authentication encryption key used for all
TACACS+ communications between the router and
the TACACS+ daemon.
tacacs-server key, on page 102
Sets the interval for which a router waits for a server
host to reply before timing out.
tacacs-server timeout, on page 104
Specifies an authentication and encryption key shared
between the AAA server and the TACACS+ server.
key (TACACS+), on page 40
Specifies a timeout value that sets the length of time
the authentication, authorization, and accounting
(AAA) server waits to receive a response from the
TACACS+ server.
timeout (TACACS+), on page 113
Configures the Virtual Private Network (VPN) routing
and forwarding (VRF) reference of an AAA
TACACS+ server group.
vrf (TACACS+), on page 127
Cisco IOS XR System Security Command Reference for the Cisco CRS Router, Release 4.1
OL-24740-01 69
Authentication, Authorization, and Accounting Commands
server-private (TACACS+)