TACACS+ Remote AuthenticationWhen configuring a TACACS+ server host, you can set different communication parameters, such as thekey password.Example of Specifying a TACACS+ Server HostDell(conf)#Dell(conf)#aaa authentication login tacacsmethod tacacs+Dell(conf)#aaa authentication exec tacacsauthorization tacacs+Dell(conf)#tacacs-server host 25.1.1.2 key ForceDell(conf)#Dell(conf)#line vty 0 9Dell(config-line-vty)#login authentication tacacsmethodDell(config-line-vty)#endSpecifying a TACACS+ Server HostTo specify a TACACS+ server host and configure its communication parameters, use the followingcommand.• Enter the host name or IP address of the TACACS+ server host.CONFIGURATION modetacacs-server host {hostname | ip-address} [port port-number] [timeoutseconds] [key key]Configure the optional communication parameters for the specific host:– port port-number: the range is from 0 to 65535. Enter a TCP port number. The default is 49.– timeout seconds: the range is from 0 to 1000. Default is 10 seconds.– key key: enter a string for the key. The key can be up to 42 characters long. This key must matcha key configured on the TACACS+ server host. This parameter must be the last parameter youconfigure.If you do not configure these optional parameters, the default global values are applied.Example of Connecting with a TACACS+ Server HostTo specify multiple TACACS+ server hosts, configure the tacacs-server host command multipletimes. If you configure multiple TACACS+ server hosts, Dell Networking OS attempts to connect withthem in the order in which they were configured.To view the TACACS+ configuration, use the show running-config tacacs+ command in EXECPrivilege mode.To delete a TACACS+ server host, use the no tacacs-server host {hostname | ip-address}command.freebsd2# telnet 2200:2200:2200:2200:2200::2202Trying 2200:2200:2200:2200:2200::2202...Connected to 2200:2200:2200:2200:2200::2202.Escape character is '^]'.Login: adminPassword:Dell#Dell#Security 731
