Securing TACACS Key

[FranckL]

Hi,

I searched but I didn't find any documentation about securring TACACS Key on Catalyst switches.

Currently, we have two ways to store TACACS Key :

- without encryption

- with Cisco 7 (like no encryption in fact)

Is there a way to crypt with AES / MD5 or another "strong" algorithm?

Thanks in advance

Franck

[johnd2310 · Accepted solution]

Hi,

What switch model and what ios code are you running? If you are running Cisco IOS XE Gibraltar 16.11.x for example, you can enable type-6 encryption.

Thanks

John

[FranckL]

Perfect answer

I just tryed and it's OK.

For information, currently, I'm running IOS at least 16.12.4a on differents Catalyst 9K (9300, 9400 and 9600).

Thanks