Enabling Tacacs - Cisco nexus 5000 series Cli Configuration Manual

Chapter 1 Configuring TACACS+
S e n d f e e d b a c k t o n x 5 0 0 0 - d o c f e e d b a c k @ c i s c o . c o m
TACACS+ Server Configuration Process
To configure TACACS+ servers, perform this task:
Enable TACACS+.
Step 1
See the
Establish the TACACS+ server connections to the Nexus 5000 Series switch.
Step 2
See the
Step 3 Configure the preshared secret keys for the TACACS+ servers.
See the
Server Preshared Keys" section on page
If needed, configure TACACS+ server groups with subsets of the TACACS+ servers for AAA
Step 4
authentication methods.
See the
section on page
If needed, configure any of the following optional parameters:
Step 5
•
•
•
•
Step 6 If needed, configure periodic TACACS+ server monitoring.
See the

Enabling TACACS+

By default, the TACACS+ feature is disabled on the Nexus 5000 Series switch. To explicitly enable the
TACACS+ feature to access the configuration and verification commands for authentication, perform
this task:
Command
Step 1
switch# configure terminal
Step 2
switch(config)# feature tacacs+
Step 3
switch(config)# exit
Step 4
switch# copy running-config
startup-config
OL-16597-01
"Enabling TACACS+" section on page
"Configuring TACACS+ Server Hosts" section on page
"Configuring Global Preshared Keys" section on page 1-6
"Configuring TACACS+ Server Groups" section on page 1-8
1-6.
Dead-time interval
Allow TACACS+ server specification at login
Timeout interval
See the "Configuring the Global TACACS+ Timeout Interval" section on page
TCP port
See the "Configuring TCP Ports" section on page
"Configuring Periodic TACACS+ Server Monitoring" section on page
1-5.
1-7.
1-11.
Purpose
Enters configuration mode.
Enables TACACS+.
Exits configuration mode.
(Optional) Copies the running configuration to the
startup configuration.
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
Configuring TACACS+
1-6.
and the "Configuring TACACS+
and the "Configuring AAA"
1-10.
1-11.
1-5