CLI Reference TACACS+ Configuration Commands
The following example defines a TACACS+ secure server host:
Ruijie(config)# tacacs-server host 192.168.12.1
Ruijie(config)# tacacs-server host 2001::1
Define AAA identity authentication method list.
Define the shared password of TACACS+
secure server globally.
Define timeout timer of reply packet of
TACACS+ server globally.
tacacs-server key
Use this command to configure global password of TACACS+ :
tacacs-server key [0 | 7] string
no tacacs-server key
Encryption type of password, 0 indicates no
encryption ; 7 indicates being simply encrypted.
No specified shared password.
Global configuration mode.
The device and TACACS+ secure server communicates with each
other successfully on the basis of the shared password. Therefore, in
order to make the device and TACACS+ secure server communicate
with each other, the same shared password must be defined on both
of them. When we need to specify different passwords to every
server, use key option in tacacs-server host command. We can set
a key to all the servers that have not set key option in global
configuration mode.
The following example defines the shared password of TACACS+