diff --git a/cli/documentation/en_US/tacacs/show b/cli/documentation/en_US/tacacs/show
new file mode 100755
index 0000000..384e522
--- /dev/null
+++ b/cli/documentation/en_US/tacacs/show
@@ -0,0 +1,4 @@
+Show TACACS+ aaa operational state.
+
+Print out the global aaa sources and services,
+as well as any configured TACACS+ servers and parameters.
diff --git a/cli/documentation/en_US/tacacs/show-example b/cli/documentation/en_US/tacacs/show-example
new file mode 100755
index 0000000..f4eae1e
--- /dev/null
+++ b/cli/documentation/en_US/tacacs/show-example
@@ -0,0 +1,2 @@
+show tacacs
+  Display the TACACS+ aaa operational state.
diff --git a/cli/documentation/en_US/tacacs/tacacs b/cli/documentation/en_US/tacacs/tacacs
new file mode 100755
index 0000000..9c89268
--- /dev/null
+++ b/cli/documentation/en_US/tacacs/tacacs
@@ -0,0 +1,7 @@
+Configure server and protocol parameters for TACACS+.
+Specify remote TACACS+ servers, along with protocol timeouts 
+and security settings.
+
+TACACS+ specific configuration here is enabled by a corresponding
+'aaa' command to enable authentication, authorization, or accounting
+via the TACACS+ protocol.
diff --git a/cli/documentation/en_US/tacacs/tacacs-example b/cli/documentation/en_US/tacacs/tacacs-example
new file mode 100755
index 0000000..e31865c
--- /dev/null
+++ b/cli/documentation/en_US/tacacs/tacacs-example
@@ -0,0 +1,28 @@
+tacacs server timeout 50
+  Configure the global TACACS+ protocol timeout to 50s.
+
+no tacacs server timeout
+  Configure the default TACACS+ prototol timeout.
+
+tacacs server key SECRET-KEY
+  Configure the (plaintext) key used to communicate with
+  the TACACS+ server, if no key is specified for a given server.
+
+no tacacs server key
+  Reset the global TACACS+ server key.
+  If no key is specified, an empty key is assumed.
+
+tacacs server host AA.BB.CC.DD
+  Add a TACACS+ server with the specified IP address.
+
+no tacacs server host AA.BB.CC.DD
+  Delete the specified TACACS+ server
+
+tacacs server host AA.BB.CC.DD key SECRET-KEY
+  Specify an encryption key for this TACACS+ server.
+
+no tacacs server host AA.BB.CC.DD key
+  Remove any key associated with this server,
+  and use the global TACACS+ key instead.
+
+
diff --git a/cli/documentation/en_US/tacacs/tacacs-host b/cli/documentation/en_US/tacacs/tacacs-host
new file mode 100755
index 0000000..9922385
--- /dev/null
+++ b/cli/documentation/en_US/tacacs/tacacs-host
@@ -0,0 +1 @@
+Configure TACACS+ servers by IP address for aaa roles.Hosts are not active for aaa rules unless the associated 'aaa' command is used. Delete the host with the 'no' form of this command.
diff --git a/cli/documentation/en_US/tacacs/tacacs-host-key b/cli/documentation/en_US/tacacs/tacacs-host-key
new file mode 100755
index 0000000..f47592e
--- /dev/null
+++ b/cli/documentation/en_US/tacacs/tacacs-host-key
@@ -0,0 +1,6 @@
+Specify the TACACS+ encryption key used to communicate with
+this TACACS+ server.  If no key is specified, the global
+key is used.
+
+Reset the per-host key (and fall back to the global key)
+with the 'no' version of this command.
diff --git a/cli/documentation/en_US/tacacs/tacacs-key b/cli/documentation/en_US/tacacs/tacacs-key
new file mode 100755
index 0000000..2d2e172
--- /dev/null
+++ b/cli/documentation/en_US/tacacs/tacacs-key
@@ -0,0 +1,8 @@
+Configure the default TACACS+ protocol key used to secure
+the communications channel with the TACACS+ server(s).
+
+The default key is used if there is no key defined
+for an individual server.
+
+The default key can be reset (to an empty key)
+with the 'no' form of this command.
diff --git a/cli/documentation/en_US/tacacs/tacacs-timeout b/cli/documentation/en_US/tacacs/tacacs-timeout
new file mode 100755
index 0000000..3862e9d
--- /dev/null
+++ b/cli/documentation/en_US/tacacs/tacacs-timeout
@@ -0,0 +1,9 @@
+Configure the global timeout for communicating with TACACS+ servers.
+The timeout is specified in seconds.
+
+If the timeout expires before the TACACS+ server responds,
+then the TACACS+ aaa action is considered 'failed',
+and other methods can be attempted.
+
+The server timeout is reset to the system default using the 'no' 
+command prefix.