27
TACACS+ COMMANDS
tacacs-server host The tacacs-server host Global Configuration mode command specifies a
TACACS+ host. To delete the specified name or address, use the no form
of this command.
Syntax
tacacs-server host {ip-address | hostname} [single-connection] [port
port-number] [timeout timeout] [key key-string] [source source]
[priority priority]
no tacacs-server host {ip-address | hostname}
Parameters
■ ip-address — IP address of the TACACS+ server.
■ hostname — Host name of the TACACS+ server. (Range: 1-158
characters)
■ single-connection — Indicates a single-connection. Rather than have
the device open and close a TCP connection to the daemon each time
it must communicate, the single-connection option maintains a single
open connection between the device and the daemon.
■ port-number — Specifies a server port number. The host is not used
for authentication if the port number is set to 0. The host is not used
for authentication if the port number is set to 0. (Range: 0-65535)
■ timeout — Specifies the timeout value in seconds. (Range: 1-30)
■ key-string — Specifies the authentication and encryption key for all
TACACS+ communications between the device and the TACACS+
server. This key must match the encryption used on the TACACS+
daemon. To specify an empty string, enter "". (Range: 0-128
characters)