Cisco nexus 5000 series Cli Configuration Manual page 249

S e n d f e e d b a c k t o n x 5 0 0 0 - d o c f e e d b a c k @ c i s c o . c o m
Configuring TACACS+
This chapter describes how to configure the Terminal Access Controller Access Control System Plus
(TACACS+) protocol on Nexus 5000 Series switches.
This chapter includes the following sections:
•
•
•
•
•
•
•
•
Information About TACACS+
The TACACS+ security protocol provides centralized validation of users attempting to gain access to a
Nexus 5000 Series switch. TACACS+ services are maintained in a database on a TACACS+ daemon
typically running on a UNIX or Windows NT workstation. You must have access to and must configure
a TACACS+ server before the configured TACACS+ features on your Nexus 5000 Series switch are
available.
TACACS+ provides for separate authentication, authorization, and accounting facilities. TACACS+
allows for a single access control server (the TACACS+ daemon) to provide each service (authentication,
authorization, and accounting) independently. Each service is associated with its own database to take
advantage of other services available on that server or on the network, depending on the capabilities of
the daemon.
The TACACS+ client/server protocol uses TCP (TCP port 49) for transport requirements. Nexus 5000
Series switches provide centralized authentication using the TACACS+ protocol.
This section includes the following topics:
•
•
•
OL-16597-01
Information About TACACS+, page 1-1
Prerequisites for TACACS+, page 1-4
Guidelines and Limitations, page 1-4
Configuring TACACS+, page 1-4
Displaying TACACS+ Statistics, page 1-14
Verifying TACACS+ Configuration, page 1-14
Example TACACS+ Configuration, page 1-14
Default Settings, page 1-15
TACACS+ Advantages, page 1-2
User Login with TACACS+, page 1-2
Default TACACS+ Server Encryption Type and Preshared Key, page 1-3
C H A P T E R
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
1
1-1