Filter
Top Products
Authentication, Authorization, and Accounting Commands on Cisco IOS XR Software
tacacs-server host
SR-83
Cisco IOS XR System Security Command Reference
Usage Guidelines To use this command, you must be in a user group associated with a task group that includes the proper
task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on
Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
The key keyword must be entered last because it uses a line (text with breaks) rather than a string (text
only, with no breaks). Any text and line breaks up to the time the user presses Enter can be used as part
of the key.
You can use multiple tacacs-server host commands to specify additional hosts. Cisco IOS XR software
searches for hosts in the order in which you specify them.
Task ID
Examples The following example shows how to specify a TACACS+ host with the IP address 209.165.200.226:
RP/0/RP0/CPU0:router(config)# tacacs-server host 209.165.200.226
RP/0/RP0/CPU0:router(config-tacacs-host)#
The following example shows that the default values from the tacacs-server host command are
displayed from the show run command:
RP/0/RP0/CPU0:router# show run
Building configuration...
!! Last configuration change at 13:51:56 UTC Mon Nov 14 2005 by lab
!
tacacs-server host 209.165.200.226 port 49
timeout 5
!
The following example shows how to specify that the router consult the TACACS+ server host named
host1 on port number 51. The timeout value for requests on this connection is 30 seconds; the encryption
key is a_secret.
RP/0/RP0/CPU0:router(config)# tacacs-server host host1 port 51 timeout 30 key a_secret
Related Commands
Task ID Operations
aaa read, write
Command Description
tacacs-server key Globally sets the authentication encryption key used for all TACACS+
communications between the router and the TACACS+ daemon.
tacacs-server timeout Globally sets the interval that the router waits for a server host to reply.