HP Cisco MDS 9120 Cisco Nexus 5000 Series Command Reference Release 4.0(1a)N2( - Page 472

tacacs-server key Chapter 6 Security Commands Send comments to [email protected] tacacs-server key To configure a global TACACS+ shared secret key, use the tacacs-server key command. To remove a configured shared secret, use the no form of this command. tacacs-server key [0 | 7] shared-secret no tacacs-server key [0 | 7] shared-secret Syntax Description 0 7 shared-secret (Optional) Configures a preshared key specified in clear text to authenticate communication between the TACACS+ client and server. This is the default. (Optional) Configures a preshared key specified in encrypted text to authenticate communication between the TACACS+ client and server. Preshared key to authenticate communication between the TACACS+ client and server. The maximum length is 63 characters. Command Default None Command Modes Configuration mode Command History Release 4.0(0)N1(1a) Modification This command was introduced. Usage Guidelines You must configure the TACACS+ preshared key to authenticate the switch to the TACACS+ server. The length of the key is restricted to 65 characters and can include any printable ASCII characters (white spaces are not allowed). You can configure a global key to be used for all TACACS+ server configurations on the switch. You can override this global key assignment by using the key keyword in the tacacs-server host command. You must use the feature tacacs+ command before you configure TACACS+. Examples The following example shows how to configure TACACS+ server shared keys: switch(config)# tacacs-server key AnyWord switch(config)# tacacs-server key 0 AnyWord switch(config)# tacacs-server key 7 public Related Commands Command feature tacacs+ show tacacs-server Description Enables TACACS+. Displays TACACS+ server information. 6-138 Cisco Nexus 5000 Series Command Reference OL-16599-01