Remove Client-Side TACACS+ Server Configuration

Learn how to remove TACACS+ server configuration from the client.

Before you begin

You must have the admin role to perform this task.

Procedure

  1. Display the configured server IP addresses and keys.
    device# show running-config tacacs-server 
    tacacs-server host 10.2.3.5
       encrypted-key "jahasjikjdoaskjuihuhiaoljsiaknkaiua="
    
    tacacs-server host 1.2.3.4 
       encrypted-key JMeYDVdBN4Vb-wx35d7HnXIE8BL9KLUcEcePFwMNGo
  2. Run the configure terminal command to access Config mode.
    The command line changes to configuration mode.
    device(config)# 
  3. Run the no tacacs-server host command to remove the TACACS+ configuration from the server.
    device(config)# no tacacs-server host 10.2.3.5
  4. Return to privileged EXEC mode with the end command.
    device(config-tacacs-config)# end
  5. Run the show running-config tacacs-server command to verify that the specified server does not appear in the list of TACACS+ servers configuration.
    device# show running-config tacacs-server 
    tacacs-server host 1.2.3.4 
       encrypted-key JMeYDVdBN4Vb-wx35d7HnXIE8BL9KLUcEcePFwMNGo

Example

The following example removes the TACACS+ configuration from the server on 10.2.3.5 and then verifies that it is no longer in the list of server hosts with the show command.

device# configure terminal
device(config)# no tacacs-server host 10.2.3.5
device(config)# end

device# show running-config tacacs-server
tacacs-server host 1.2.3.4 
   encrypted-key JMeYDVdBN4Vb-wx35d7HnXIE8BL9KLUcEcePFwMNGo