Configuring Periodic Tacacs+ Server Monitoring - Cisco AJ732A - MDS 9134 Fabric Switch Configuration Manual

Chapter 18 Configuring TACACS+
S e n d f e e d b a c k t o n x 5 0 0 0 - d o c f e e d b a c k @ c i s c o . c o m

Configuring Periodic TACACS+ Server Monitoring

You can monitor the availability of TACACS+ servers. These parameters include the username and
password to use for the server and an idle timer. The idle timer specifies the interval in which a
TACACS+ server receives no requests before the Nexus 5000 Series switch sends out a test packet.You
can configure this option to test servers periodically, or you can run a one-time only test.
Note To protect network security, we recommend that you use a user name that is not the same as an existing
username in the TACACS+ database.
The test idle timer specifies the interval in which a TACACS+ server receives no requests before the
Nexus 5000 Series switch sends out a test packet.
The default idle timer value is 0 minutes. When the idle time interval is 0 minutes, periodic TACACS+
Note
server monitoring is not performed.
To configure periodic TACACS+ server monitoring, perform this task:
Command
Step 1
switch# configure terminal
Step 2
switch(config)# tacacs-server host
{ipv4-address | ipv6-address | host-name}
test {idle-time minutes | password
password [idle-time minutes] | username
name [password password [idle-time
minutes]]}
Step 3
switch(config)# tacacs-server dead-time
minutes
Step 4
switch(config)# exit
Step 5
switch# show tacacs-server
Step 6
switch# copy running-config startup-config
The following example shows how to configure periodic TACACS+ server monitoring:
switch# configure terminal
switch(config)# tacacs-server host 10.10.1.1 test username user1 password Ur2Gd2BH
idle-time 3
switch(config)# tacacs-server dead-time 5
switch(config)# exit
switch# show tacacs-server
switch# copy running-config startup-config
OL-16597-01
Purpose
Enters configuration mode.
Specifies parameters for server monitoring. The
default username is test and the default password is
test. The default value for the idle timer is 0 minutes
and the valid range is 0 to 1440 minutes.
Note For periodic TACACS+ server monitoring,
the idle timer value must be greater than 0.
Specifies the number minutes before the Nexus
5000 Series switch checks a TACACS+ server that
was previously unresponsive. The default value is 0
minutes and the valid range is 0 to 1440 minutes.
Exits configuration mode.
(Optional) Displays the TACACS+ server
configuration.
(Optional) Copies the running configuration to the
startup configuration.
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
Configuring TACACS+
18-11