1000
Command Reference for IE200 Series Industrial Managed PoE+ Switches
C613-50066-01 REV A
AlliedWare Plus™ Operating System - Version 5.4.5I-0.x
C
OMMANDS
TACACS
-
SERVER
HOST
tacacs-server host
Overview
Use this command to specify a remote server host for authentication,
authorization and accounting, and to set the shared secret key to use with the
server. The parameters specified with this command override the
corresponding global parameters for servers.
Use the
no
variant of this command to remove the specified server host as a
authentication and authorization server.
Syntax
tacacs-server host {<
host-name
>|<
ip-address
>} [key
[8]<
key-string
>]
no tacacs-server host {<
host-name
>|<
ip-address
>}
Default
No server is configured by default.
Mode
Global Configuration
Usage
A server host cannot be configured multiple times like a RADIUS server.
As many as four servers can be configured and consulted for login
authentication, enable password authentication and accounting. The first server
configured is regarded as the primary server and if the primary server fails then the
backup servers are consulted in turn. A backup server is consulted if the primary
server fails, not if a login authentication attempt is rejected. The reasons a server
would fail are:
•
it is not network reachable
•
it is not currently capable
Parameter
Description
<
host-name
>
Server host name. The DNS name of the server host.
<
ip-address
>
The IP address of the server host, in dotted decimal
notation A.B.C.D.
key
Set shared secret key with servers.
8
Specifies that you are entering a password as a string that has
already been encrypted instead of entering a plain text password.
The running config displays the new password as an encrypted
string even if password encryption is turned off.
<
key-string
>
Shared key string applied, a value in the range 1 to 64 characters.
Specifies the shared secret authentication or encryption key for all
communications between this device and the
server. This key must match the encryption used on the
server. This setting overrides the global setting of the
tacacs-server key
command. If no key value is specified, the global
value is used.
