Table of Contents
Advertisement
S e n d f e e d b a c k t o n x 5 0 0 0 - d o c f e e d b a c k @ c i s c o . c o m
Configuring TACACS+
This chapter describes how to configure the Terminal Access Controller Access Control System Plus
(TACACS+) protocol on Nexus 5000 Series switches.
This chapter includes the following sections:
•
•
•
•
•
•
•
•
Information About TACACS+
The TACACS+ security protocol provides centralized validation of users attempting to gain access to a
Nexus 5000 Series switch. TACACS+ services are maintained in a database on a TACACS+ daemon
typically running on a UNIX or Windows NT workstation. You must have access to and must configure
a TACACS+ server before the configured TACACS+ features on your Nexus 5000 Series switch are
available.
TACACS+ provides for separate authentication, authorization, and accounting facilities. TACACS+
allows for a single access control server (the TACACS+ daemon) to provide each service (authentication,
authorization, and accounting) independently. Each service is associated with its own database to take
advantage of other services available on that server or on the network, depending on the capabilities of
the daemon.
The TACACS+ client/server protocol uses TCP (TCP port 49) for transport requirements. Nexus 5000
Series switches provide centralized authentication using the TACACS+ protocol.
This section includes the following topics:
•
•
•
OL-16597-01
Information About TACACS+, page 18-1
Prerequisites for TACACS+, page 18-4
Guidelines and Limitations, page 18-4
Configuring TACACS+, page 18-4
Displaying TACACS+ Statistics, page 18-13
Verifying TACACS+ Configuration, page 18-13
Example TACACS+ Configuration, page 18-13
Default Settings, page 18-14
TACACS+ Advantages, page 18-2
User Login with TACACS+, page 18-2
Default TACACS+ Server Encryption Type and Preshared Key, page 18-3
C H A P T E R
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
18
18-1
Advertisement
Chapters
Table of Contents
Troubleshooting
