Enabling Tacacs; Configuring Tacacs+ Server Hosts - Cisco Nexus 5000 Series Configuration Manual

Configuring TACACS+

Enabling TACACS+

By default, the TACACS+ feature is disabled on the Cisco Nexus 5000 Series switch. To explicitly enable
the TACACS+ feature to access the configuration and verification commands for authentication, perform this
task:
SUMMARY STEPS
1. switch# configure terminal
2. switch(config)# feature tacacs+
3. switch(config)# exit
4. (Optional) switch# copy running-config startup-config
DETAILED STEPS
Command or Action
Step 1 switch# configure terminal
Step 2
switch(config)# feature tacacs+
Step 3
switch(config)# exit
Step 4
switch# copy running-config startup-config

Configuring TACACS+ Server Hosts

To access a remote TACACS+ server, you must configure the IPv4 or IPv6 address or the hostname for the
TACACS+ server on the Cisco Nexus 5000 Series switch. All TACACS+ server hosts are added to the default
TACACS+ server group.You can configure up to 64 TACACS+ servers.
If a preshared key is not configured for a configured TACACS+ server, a warning message is issued if a global
key is not configured. If a TACACS+ server key is not configured, the global key (if configured) is used for
that server.
Before you configure TACACS+ server hosts, you should do the following:
• Enable TACACS+.
• Obtain the IPv4 or IPv6 addresses or the hostnames for the remote TACACS+ servers.
To configure TACACS+ server hosts, perform this task:
OL-20919-01
Purpose
Enters configuration mode.
Enables TACACS+.
Exits configuration mode.
(Optional)
Copies the running configuration to the startup
configuration.
Cisco Nexus 5000 Series NX-OS Security Configuration Guide
Enabling TACACS+
45