TACACS Commands 327TACACS Commandstacacs-server hostThe tacacs-server host Global Configuration mode command specifies a TACACS+ host. Todelete the specified name or address, use the no form of this command.Syntaxtacacs-server host {ip-address | hostname} [single-connection] [port port-number] [timeouttimeout] [key key-string] [source source] [priority priority]no tacacs-server host {ip-address | hostname}• ip-address—Name or IP address of the host.• hostname—Hostname of the tacacs server. (Range: 1 - 158 characters)• single-connection—Specify single-connection. Rather than have the device open andclose a TCP connection to the daemon each time it must communicate, the single-connection option maintains a single open connection between the device and thedaemon.• port-number—Specify a server port number. If unspecified, the port number defaults to49. (Range: 0 - 65535)• timeout—Specifies the timeout value in seconds. If no timeout value is specified, theglobal value is used. (Range: 1 - 30)• key-string—Specifies the authentication and encryption key for all TACACScommunications between the device and the TACACS server. This key must match theencryption used on the TACACS daemon. If no key string value is specified, the globalvalue is used. (Range: 0 - 128 characters)• source—Specifies the source IP address to use for the communication. If no source valueis specified, the global value is used.• priority—Determines the order in which the servers will be used, when 0 is the highestpriority. If unspecified defaults to 0. (Range: 0 - 65535)Default ConfigurationNo TACACS host is specifiedCommand ModeGlobal Configuration modeUser Guidelines• Multiple tacacs-server host commands can be used to specify multiple hosts.
