About global versus per-TACACS+ server passkeys (shared secrets)

To communicate with a TACACS+ AAA server, the switch must have a passkey (shared secret) configured that matches what is configured on the server. Use one of these commands to achieve the desired configuration:
  • For a global passkey common to every TACACS+ server, use tacacs-server key.

  • For a per-TACACS+ server passkey, use tacacs-server host with the key parameter.


If both passkeys are configured on the switch, the per-TACACS+ server passkey is used.