• server-ip-address – IPv4 or IPv6 address

• plaintext-value – Plaintext passkey string. Valid characters: ASCII printable except SPACE, #, and COMMA. Maximum length: 65

• encrypted-passkey-value – Encrypted passkey (cipher text)

• auth-port-value – Enter authentication port number. Range: 1– 65535, Default: 49

• priority-value – Enter the priority of TACACS server. Range: 1– 60, Default: 1

• pap – Password Authentication Protocol authentication type (default)

• chap – Challenge-Handshake Authentication Protocol authentication type

• login – Login method authentication type

• timeout-value – Enter the TACACS server timeout value. Range: 1 – 60, Default: 5

• mgmt – Management VRF, Default: no VRF

• config tacacs add [OPTIONS] <ip_address>

• config tacacs delete [OPTIONS] <ip_address>

ssonic# configure terminal
sonic(config)# tacacs-server host 10.208.120.120 passkey test23 port 23 priority 3 timeout 6 auth_type login vrf mgmt
sonic(config)# no tacacs-server host 10.208.120.120
sonic(config)#