Cisco Nexus 5000 Series Switch CLI Software Configuration Guide (OL-16597-01, July 2009)

Configuring TACACS+ Server Hosts
To access a remote TACACS+ server, you must configure the IPv4 or IPv6 address or the hostname for the
TACACS+ server on the Cisco Nexus 5000 Series switch. All TACACS+ server hosts are added to the default
TACACS+ server group.You can configure up to 64 TACACS+ servers.
If a preshared key is not configured for a configured TACACS+ server, a warning message is issued if a global
key is not configured. If a TACACS+ server key is not configured, the global key (if configured) is used for
that server.
Before you configure TACACS+ server hosts, you should do the following:
• Enable TACACS+.
• Obtain the IPv4 or IPv6 addresses or the hostnames for the remote TACACS+ servers.
To configure TACACS+ server hosts, perform this task:
Procedure
PurposeCommand or Action
Enters configuration mode.switch# configure terminal
Step 1
Specifies the IPv4 or IPv6 address or hostname
for a TACACS+ server.
switch(config)# tacacs-server host
{ipv4-address | ipv6-address | host-name}
Step 2
Exits configuration mode.switch(config)# exit
Step 3
(Optional)
Displays the TACACS+ server configuration.
switch# show tacacs-server
Step 4
(Optional)
Copies the running configuration to the startup
configuration.
switch# copy running-config
startup-config
Step 5
You can delete a TACACS+ server host from a server group.
Configuring TACACS+ Global Preshared Keys
You can configure preshared keys at the global level for all servers used by the Cisco Nexus 5000 Series
switch. A preshared key is a shared secret text string between the Cisco Nexus 5000 Series switch and the
TACACS+ server hosts.
Before you configure preshared keys, you should do the following:
• Enable TACACS+.
• Obtain the preshared key values for the remote TACACS+ servers.
To configure global preshared keys, perform this task:
Procedure
PurposeCommand or Action
Enters configuration mode.switch# configure terminal
Step 1
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
OL-16597-01 259
About Configuring TACACS+
Configuring TACACS+ Server Hosts