Remote AAA (TACACS+) defaults and limits

Setting	Default value / limit
Authentication of REST sessions with TACACS+	Disabled
Maximum number of TACACS+ servers in an AAA group	16
Maximum number of TACACS+ servers that can be configured	16
Maximum number of user-defined AAA server groups that can be configured	28
TACACS+ authentication	Disabled
TACACS+ authentication global timeout	5 seconds
TACACS+ authentication passkey (shared secret)	None
TACACS+ authentication `tcp-port`	49
TACACS+ global authentication protocol	PAP
TACACS+ server access through the default VRF	default¹

The default value is

default

, unless another VRF is specified during the server configuration.