Cisco Nexus 5500 Series - Tacacs-Server Host

344
Cisco Nexus 5500 Series NX-OS Security Command Reference
OL-27883-02
Chapter T Commands
tacacs-server host
tacacs-server host
To configure TACACS+ server host parameters, use the tacacs-server host command. To revert to the
defaults, use the no form of this command.
tacacs-server host {hostname | ipv4-address | ipv6-address} [key [0 | 7] shared-secret]
[port port-number] [test {idle-time time | password password | username name}]
[timeout seconds]
no tacacs-server host {hostname | ipv4-address | ipv6-address} [key [0 | 7] shared-secret]
[port port-number] [test {idle-time time | password password | username name}]
[timeout seconds]
Syntax Description hostname TACACS+ server Domain Name Server (DNS) name. The name is
alphanumeric, case sensitive, and has a maximum of 256 characters.
ipv4-address TACACS+ server IPv4 address in the A.B.C.D format.
ipv6-address TACACS+ server IPv6 address in the X:X
:X::X format.
key (Optional) Configures the TACACS+ server's shared secret key.
0 (Optional) Configures a preshared key specified in clear text (indicated by 0)
to authenticate communication between the TACACS+ client and server.
This is the default.
7 (Optional) Configures a preshared key specified in encrypted text (indicated
by 7) to authenticate communication between the TACACS+ client and
server.
shared-secret Preshared key to authenticate communication between the TACACS+ client
and server. The preshared key is alphanumeric, case sensitive, and has a
maximum of 63 characters.
port port-number (Optional) Configures a TACACS+ server port for authentication. The range
is from 1 to 65535.
test (Optional) Configures parameters to send test packets to the TACACS+
server.
idle-time time (Optional) Specifies the time interval (in minutes) for monitoring the server.
The time range is 1 to 1440 minutes.
password password (Optional) Specifies a user password in the test packets. The password is
alphanumeric, case sensitive, and has a maximum of 32 characters.
username name (Optional) Specifies a user name in the test packets. The username is
alphanumeric, case sensitive, and has a maximum of 32 characters.
timeout seconds (Optional) Configures a TACACS+ server timeout period (in seconds)
between retransmissions to the TACACS+ server. The range is from 1 to 60
seconds.