Cisco Nexus 9000 Series Configuration Manual page 121

Configuring TACACS+
SUMMARY STEPS
1. configure terminal
2. [no] feature privilege
3. [no] enable secret [0 | 5] password [priv-lvl priv-lvl | all]
4. [no] username username priv-lvl n
5. (Optional) show privilege
6. (Optional) copy running-config startup-config
7. exit
8. enable level
DETAILED STEPS
Command or Action
Step 1 configure terminal
Example:
switch# configure terminal
switch(config)#
Step 2 [no] feature privilege
Example:
switch(config)# feature privilege
Step 3 [no] enable secret [0 | 5] password [priv-lvl priv-lvl | all]
Example:
switch(config)# enable secret 5 def456 priv-lvl 15
Step 4
[no] username username priv-lvl n
Example:
switch(config)# username user2 priv-lvl 15
Step 5 (Optional) show privilege
Example:
switch(config)# show privilege
Step 6 (Optional) copy running-config startup-config
Example:
Configuring Privilege Level Support for Authorization on TACACS+ Servers
Purpose
Enters global configuration mode.
Enables or disables the cumulative privilege of roles. Users
can see the enable command only if this feature is enabled.
The default is disabled.
Enables or disables a secret password for a specific privilege
level. Users are prompted to enter the correct password
upon each privilege level escalation. The default is disabled.
You can enter 0 to specify that the password is in clear text
or 5 to specify that the password is in encrypted format.
The password argument can be up to 64 alphanumeric
characters. The priv-lvl argument is from 1 to 15.
Note To enable the secret password, you must have
enabled the cumulative privilege of roles by
entering the feature privilege command.
Enables or disables a user to use privilege levels for
authorization. The default is disabled.
The priv-lvl keyword specifies the privilege level to which
the user is assigned. There is no default privilege level.
Privilege levels 0 to 15 (priv-lvl 0 to priv-lvl 15) map to
user roles priv-0 to priv-15.
Displays the username, current privilege level, and status
of cumulative privilege support.
Copies the running configuration to the startup
configuration.
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
95