Configuring The Dead-Time Interval; Manually Monitoring Tacacs+ Servers Or Groups - Cisco Nexus 5000 Series Configuration Manual

Configuring the Dead-Time Interval

Configuring the Dead-Time Interval
You can configure the dead-time interval for all TACACS+ servers. The dead-time interval specifies the time
that the Cisco Nexus 5000 Series switch waits, after declaring a TACACS+ server is dead, before sending
out a test packet to determine if the server is now alive.
When the dead-timer interval is 0 minutes, TACACS+ servers are not marked as dead even if they are not
Note
responding. You can configure the dead-timer per group.
To configure the dead-time interval for all TACACS+ servers, perform this task:
SUMMARY STEPS
1. switch# configure terminal
2. switch(config)# tacacs-server deadtime minutes
3. switch(config)# exit
4. (Optional) switch# show tacacs-server
5. (Optional) switch# copy running-config startup-config
DETAILED STEPS
Command or Action
Step 1 switch# configure terminal
Step 2 switch(config)# tacacs-server deadtime minutes
Step 3
switch(config)# exit
Step 4
switch# show tacacs-server
Step 5 switch# copy running-config startup-config

Manually Monitoring TACACS+ Servers or Groups

To manually issue a test message to a TACACS+ server or to a server group, perform this task:
SUMMARY STEPS
1. switch# test aaa server tacacs+ {ipv4-address | ipv6-address | host-name} [vrf vrf-name] username
password
2. switch# test aaa group group-name username password
Cisco Nexus 5000 Series NX-OS Security Configuration Guide
56
Purpose
Enters configuration mode.
Configures the global dead-time interval. The default value is
0 minutes. The range is from 1 to 1440 minutes.
Exits configuration mode.
(Optional)
Displays the TACACS+ server configuration.
(Optional)
Copies the running configuration to the startup configuration.
Configuring TACACS+
OL-20919-01