---
title: "tacacs-plus"
slug: "cli-sc-tacacs-plus"
updated: 2025-07-02T04:37:35Z
published: 2025-09-03T14:11:33Z
canonical: "docs.crossworkassurance.cisco.com/cli-sc-tacacs-plus"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.crossworkassurance.cisco.com/llms.txt
> Use this file to discover all available pages before exploring further.

# tacacs-plus

## tacacs-plus edit

tacacs-plus edit - Used to edit TACACS+ configuration values

**Description:** tacacs-plus edit modifies the TACACS+ parameters required to authenticate, then authorize management access to the unit.

**Syntax:**

```
  tacacs-plus edit {
              {auth-method {ascii | chap | pap}} |
              {auth-server1-host {<ip-addr> | <dns-name>}} |
              {auth-server1-port <decimal>} |
              {auth-server1-secret <string>} |
              {auth-server1-source <ip-addr>} |
              {auth-server2-host {<ip-addr> | <dns-name>}} |
              {auth-server2-port <decimal>} |
              {auth-server2-secret <string>} |
              {auth-server2-source <ip-addr>} |
              {timeout <decimal>} |
              {retries <decimal>} }+
```

**Parameters:**

| Parameter | Description |
| --- | --- |
| auth-method | Authentication method to use. |
| auth-server1-host | TACACS+ host server to authenticate to. Enter '0.0.0.0' to disable this server. |
| auth-server1-port | TACACS+ server TCP port to connect to. |
| auth-server1-secret | Shared secret for server1. |
| auth-server1-source | Optional bind address to access server1. |
| auth-server2-host | Only used if the first host server does not respond. Enter '0.0.0.0' to disable this server. |
| auth-server2-port | TACACS+ server TCP port to connect to. |
| auth-server2-secret | Shared secret for server2. |
| auth-server2-source | Optional bind address to access server2. |
| timeout | The time to wait for the TACACS+ server to respond before retrying the connection, in seconds. After the number of retries has been exhausted, a connection to the next configured server will be attempted, in which the same timeout and retry scheme will apply. |
| retries | Number of times to retry the server before trying with the next configured server. |

## tacacs-plus show

tacacs-plus show - Show the TACACS+ configuration

**Description:** Displays the current TACACS+ configuration.

**Syntax:**

```
  tacacs-plus show
```

**© 2026 Cisco and/or its affiliates. All rights reserved.** For more information about trademarks, please visit: [Cisco trademarks](https://www.cisco.com/c/en/us/about/legal/trademarks.html)[](https://www.cisco.com/c/en/us/about/legal/trademarks.html) For more information about legal terms, please visit: [Cisco legal terms](https://www.cisco.com/c/en/us/about/legal/terms-conditions.html)