Specifying A Tacacs+ Server At Login - Cisco Nexus 5000 Series Configuration Manual

Configuring TACACS+
Command or Action
Step 3
exit
Example:
switch(config)# exit
switch#
Step 4 show tacacs-server
Example:
switch# show tacacs-server
Step 5
copy running-config startup config
Example:
switch# copy running-config startup-config
Table 9: Related Commands
Command
aaa group server tacacs group-name

Specifying a TACACS+ Server at Login

You can configure the switch to allow the user to specify which TACACS+ server to send the authenticate
request by enabling the directed-request option. By default, a Cisco Nexus 5000 Series switch forwards an
authentication request based on the default AAA authentication method. If you enable this option, the user
can log in as username@hostname , where hostname is the name of a configured RADIUS server.
User specified logins are only supported for Telnet sessions.
Note
To specify a TACACS+ server at login, perform this task:
SUMMARY STEPS
1. switch# configure terminal
2. switch(config)# tacacs-server directed-request
3. switch(config)# exit
4. (Optional) switch# show tacacs-server directed-request
5. (Optional) switch# copy running-config startup-config
OL-20919-01
Specifying a TACACS+ Server at Login
Purpose
Exits configuration mode.
(Optional)
Displays the TACACS+ server configuration information.
(Optional)
Copies the running configuration to the startup
configuration.
Description
Creates a TACACS+ server group and enters the
TACACS+ server group configuration submode for
that group. The group-name argument is a
case-sensitive alphanumeric string with a maximum
length of 127 characters.
Cisco Nexus 5000 Series NX-OS Security Configuration Guide
51