Chapter 7
| Authentication Commands
TACACS+ Client
– 193 –
port-number - TACACS+ server TCP port used for authentication messages.
(Range: 1-65535)
retransmit - Number of times the switch will try to authenticate logon
access via the TACACS+ server. (Range: 1-30)
timeout - Number of seconds the switch waits for a reply before resending
a request. (Range: 1-540)
Default Setting
authentication port - 49
timeout - 5 seconds
retransmit - 2
Command Mode
Global Configuration
Example
Console(config)#tacacs-server 1 host 192.168.1.25 port 181 timeout 10
retransmit 5 key green
Console(config)#
tacacs-server key This command sets the TACACS+ encryption key. Use the no form to restore the
default.
Syntax
tacacs-server key key-string
no tacacs-server key
key-string - Encryption key used to authenticate logon access for the client.
Do not use blank spaces in the string. (Maximum length: 48 characters)
Default Setting
None
Command Mode
Global Configuration
Example
Console(config)#tacacs-server key green
Console(config)#