Information About Aaa Guidelines And Limitations; Configuring Aaa; Configuring Console Login Authentication Methods - Cisco Nexus 5000 Series Configuration Manual

Information about AAA Guidelines and Limitations

• The preshared secret key is configured on the Cisco Nexus 5000 Series switch and on the remote AAA
• The remote server responds to AAA requests from the Cisco Nexus 5000 Series switch.
Related Topics
•
•
•
•

Information about AAA Guidelines and Limitations

The Cisco Nexus 5000 Series switches do not support all numeric usernames, whether created with TACACS+
or RADIUS, or created locally. If an all numeric username exists on an AAA server and is entered during
login, the Cisco Nexus 5000 Series switch will still log in the user.
You should not create user accounts with usernames that are all numeric.
Caution

Configuring AAA

Configuring Console Login Authentication Methods

This section describes how to configure the authentication methods for the console login.
The authentication methods include the following:
• Global pool of RADIUS servers
• Named subset of RADIUS or TACACS+ servers
• Local database on the Nexus 5000 Series switch
• Username only ( none )
The default method is local.
Note The group radius and group server-name forms of the aaa authentication command are used for a
set of previously defined RADIUS servers. Use the radius server-host command to configure the host
servers. Use the aaa group server radius command to create a named group of servers.
Before you configure console login authentication methods, configure RADIUS or TACACS+ server groups
as needed. To configure console login authentication methods, perform this task:
Cisco Nexus 5000 Series NX-OS Security Configuration Guide
12
servers.
Configuring RADIUS Server Hosts, page 27
Configuring TACACS+ Server Hosts, page 45
Manually Monitoring RADIUS Servers or Groups, page 38
Manually Monitoring TACACS+ Servers or Groups, page 56
Configuring Console Login Authentication Methods
OL-20919-01