Cisco CRS User Manual

tacacs-server host
To specify a TACACS+ host server, use the tacacs-server host command. To delete the specified name or
address, use the no form of this command.
tacacs-server host host-name [port port-number] [timeout seconds] [key [0| 7] auth-key]
[single-connection]
no tacacs-server host host-name [port port-number]
Syntax Description
Host or domain name or IP address of the TACACS+ server.
host-name
(Optional) Specifies a server port number. This option overrides the default, which is
port 49. Valid port numbers range from 1 to 65535.
port port-number
(Optional) Specifies a timeout value that sets the length of time the authentication,
authorization, and accounting (AAA) server waits to receive a response from the
TACACS+ server. This option overrides the global timeout value set with the
tacacs-server timeout command for this server only. The valid timeout range is from
1 to 1000 seconds. Default is 5.
Note: You can use this parameter only in the config-tacacs-host sub-mode.
timeout seconds
(Optional) Specifies an authentication and encryption key shared between the AAA
server and the TACACS+ server. The TACACS+ packets are encrypted using this key.
This key must match the key used by the TACACS+ daemon. Specifying this key
overrides the key set by the tacacs-server keycommand for this server only.
(Optional) Entering 0 specifies that an unencrypted (clear-text) key follows.
(Optional) Entering 7 specifies that an encrypted key follows.
The auth-key argument specifies the unencrypted key between the AAA server and
the TACACS+ server.
Note: You can use this parameter only in the config-tacacs-host sub-mode.
key [0 | 7] auth-key
(Optional) Multiplexes all TACACS+ requests to this server over a single TCP
connection. By default, a separate connection is used for each session.
Note: You can use this parameter only in the config-tacacs-host sub-mode.
single-connection
Command Default
No TACACS+ host is specified.
The port-name argument, if not specified, defaults to the standard port 49.
The seconds argument, if not specified, defaults to 5 seconds.
Command Modes
Global configuration mode
Cisco IOS XR System Security Command Reference for the Cisco CRS Router, Release 4.1
OL-24740-01 99
Authentication, Authorization, and Accounting Commands
tacacs-server host

Cisco CRS Specifications

General

Brand	Cisco
Model	CRS
Category	Network Router
Language	English