About global versus per-TACACS+ server passkeys (shared secrets)

To communicate with a TACACS+ AAA server, the switch must have a passkey (shared secret) configured that matches what is configured on the server. Use one of these commands to achieve the desired configuration:

For a global passkey common to every TACACS+ server, use tacacs-server key.
For a per-TACACS+ server passkey, use tacacs-server host with the key parameter.

NOTE:

If both passkeys are configured on the switch, the per-TACACS+ server passkey is used.