Specifying A Tacacs+ Server At Login; Configuring The Global Tacacs+ Timeout Interval - Cisco AP775A - Nexus Converged Network Switch 5010 Configuration Manual

Specifying a TACACS+ Server at Login

Step 6
Step 7
The following example shows how to configure a TACACS+ server group:
switch# configure terminal
switch(config)# aaa group server tacacs+ TacServer
switch(config-tacacs+)# server 10.10.2.2
switch(config-tacacs+)# deadtime 30
switch(config-tacacs+)# exit
switch(config)# show tacacs-server groups
switch(config)# copy running-config startup-config
Specifying a TACACS+ Server at Login
You can configure the switch to allow the user to specify which TACACS+ server to send the authenticate
request by enabling the directed-request option. By default, a Cisco Nexus 5000 Series switch forwards an
authentication request based on the default AAA authentication method. If you enable this option, the user
can log in as username@hostname , where hostname is the name of a configured RADIUS server.
User specified logins are only supported for Telnet sessions.
Note
To specify a TACACS+ server at login, perform this task:
Procedure
Step 1
Step 2
Step 3
Step 4
Step 5

Configuring the Global TACACS+ Timeout Interval

You can set a global timeout interval that the Cisco Nexus 5000 Series switch waits for responses from all
TACACS+ servers before declaring a timeout failure. The timeout interval determines how long the switch
waits for responses from TACACS+ servers before declaring a timeout failure.
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
262
Command or Action
switch(config)# show tacacs-server
groups
switch(config)# copy running-config
startup-config
Command or Action
switch# configure terminal
switch(config)# tacacs-server
directed-request
switch(config)# exit
switch# show tacacs-server
directed-request
switch# copy running-config
startup-config
Purpose
(Optional)
Displays the TACACS+ server group configuration.
(Optional)
Copies the running configuration to the startup
configuration.
Purpose
Enters configuration mode.
Allows users to specify a TACACS+ server to send
the authentication request when logging in. The
default is disabled.
Exits configuration mode.
(Optional)
Displays the TACACS+ directed request
configuration.
(Optional)
Copies the running configuration to the startup
configuration.
About Configuring TACACS+
OL-16597-01