Chapter 3: Management Commands 127
no tacacs-server
timeout
Use the no tacacs-server timeout command to restore the default timeout
value for all TACACS servers.
key Use the
key command in TACACS Configuration mode to specify the
authentication and encryption key for all TACACS communications between the
device and the TACACS server. This key must match the key used on the
TACACS daemon. The
key-string parameter specifies the key name. For an
empty string use “ ”. (Range: 0 - 128 characters).
Text-based configuration supports TACACS server’s secrets in encrypted and
non-encrypted format. When you save the configuration, these secret keys are
stored in encrypted format only. If you want to enter the key in encrypted format,
enter the key along with the encrypted keyword. In the “show running-config” on
page 177 command’s display, these secret keys are displayed in encrypted
format. You cannot show these keys in plain text format.
keystring Use the
keystring
command in TACACS Server Configuration mode to set the
TACACS+ server-specific authentication encryption key used for all TACACS+
communications between the TACACS+ server and the client.
Default 5
Format
tacacs-server timeout
timeout
Mode Global Config
Format
no tacacs-server timeout
Mode Global Config
Format
key
[
key-string
| encrypted
key-string
]
Mode TACACS Config
Format
keystring
Mode TACACS Server Config