Cisco Nexus 5000 Series Switch CLI Software Configuration Guide, NX-OS 4.0(1a)N1 (OL-16597-01, January 2009)

Send feedback to [e-mail]
18-5
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
OL-16597-01
Chapter 18 Configuring TACACS+
Configuring TACACS+
Step 3 Configure the preshared secret keys for the TACACS+ servers.
See the “Configuring Global Preshared Keys” section on page 18-6 and the “Configuring TACACS+
Server Preshared Keys” section on page 18-7.
Step 4 If needed, configure TACACS+ server groups with subsets of the TACACS+ servers for AAA
authentication methods.
See the “Configuring TACACS+ Server Groups” section on page 18-7 and the “Configuring AAA”
section on page 16-6.
Step 5 If needed, configure any of the following optional parameters:
• Dead-time interval
• Allow TACACS+ server specification at login
• Timeout interval
See the “Configuring the Global TACACS+ Timeout Interval” section on page 18-9.
• TCP port
See the “Configuring TCP Ports” section on page 18-10.
Step 6 If needed, configure periodic TACACS+ server monitoring.
See the “Configuring Periodic TACACS+ Server Monitoring” section on page 18-11.
Enabling TACACS+
By default, the TACACS+ feature is disabled on the Nexus 5000 Series switch. To explicitly enable the
TACACS+ feature to access the configuration and verification commands for authentication, perform
this task:
Configuring TACACS+ Server Hosts
To access a remote TACACS+ server, you must configure the IPv4 or IPv6 address or the hostname for
the TACACS+ server on the Nexus 5000 Series switch. All TACACS+ server hosts are added to the
default TACACS+ server group.You can configure up to 64 TACACS+ servers.
If a preshared key is not configured for a configured TACACS+ server, a warning message is issued if a
global key is not configured. If a TACACS+ server key is not configured, the global key (if configured)
is used for that server (see the “Configuring Global Preshared Keys” section on page 18-6 and the
“Configuring TACACS+ Server Preshared Keys” section on page 18-7).
Before you configure TACACS+ server hosts, you should do the following:
Command Purpose
Step 1
switch# configure terminal
Enters configuration mode.
Step 2
switch(config)# feature tacacs+
Enables TACACS+.
Step 3
switch(config)# exit
Exits configuration mode.
Step 4
switch# copy running-config
startup-config
(Optional) Copies the running configuration to the
startup configuration.