Configuring Tacacs+ Global Preshared Keys - Cisco Nexus 5000 Series Configuration Manual

Configuring TACACS+ Global Preshared Keys

SUMMARY STEPS
1. switch# configure terminal
2. switch(config)# tacacs-server host {ipv4-address | ipv6-address | host-name}
3. switch(config)# exit
4. (Optional) switch# show tacacs-server
5. (Optional) switch# copy running-config startup-config
DETAILED STEPS
Command or Action
Step 1
switch# configure terminal
Step 2 switch(config)# tacacs-server host {ipv4-address |
ipv6-address | host-name}
Step 3 switch(config)# exit
Step 4 switch# show tacacs-server
Step 5
switch# copy running-config startup-config
You can delete a TACACS+ server host from a server group.
Configuring TACACS+ Global Preshared Keys
You can configure preshared keys at the global level for all servers used by the Cisco Nexus 5000 Series
switch. A preshared key is a shared secret text string between the Cisco Nexus 5000 Series switch and the
TACACS+ server hosts.
Before you configure preshared keys, you should do the following:
• Enable TACACS+.
• Obtain the preshared key values for the remote TACACS+ servers.
To configure global preshared keys, perform this task:
SUMMARY STEPS
1. switch# configure terminal
2. switch(config)# tacacs-server key [0 | 7] key-value
3. switch(config)# exit
4. (Optional) switch# show tacacs-server
5. (Optional) switch# copy running-config startup-config
Cisco Nexus 5000 Series NX-OS Security Configuration Guide
46
Purpose
Enters configuration mode.
Specifies the IPv4 or IPv6 address or hostname for a
TACACS+ server.
Exits configuration mode.
(Optional)
Displays the TACACS+ server configuration.
(Optional)
Copies the running configuration to the startup
configuration.
Configuring TACACS+
OL-20919-01