Cisco Nexus 5000 Series Switch CLI Software Configuration Guide (OL-16597-01, July 2009)

PurposeCommand or Action
The preshared keys are saved in encrypted form
in the running configuration. Use the show
running-config command to display the
encrypted preshared keys.
Note
(Optional)
Copies the running configuration to the startup
configuration.
switch# copy running-config
startup-config
Step 5
The following example shows how to configure the TACACS+ preshared keys:
switch# configure terminal
switch(config)# tacacs-server host 10.10.1.1 key 0 PlIjUhYg
switch(config)# exit
switch# show tacacs-server
switch# copy running-config startup-config
Configuring TACACS+ Server Groups
You can specify one or more remote AAA servers to authenticate users using server groups. All members of
a group must belong to the TACACS+ protocol. The servers are tried in the same order in which you configure
them.
You can configure these server groups at any time but they only take effect when you apply them to an AAA
service.
To configure TACACS+ server groups, perform this task:
Procedure
PurposeCommand or Action
Enters configuration mode.switch# configure terminal
Step 1
Creates a TACACS+ server group and enters the
TACACS+ server group configuration mode for that
group.
switch(config)# aaa group server
tacacs+ group-name
Step 2
Configures the TACACS+ server as a member of the
TACACS+ server group.
switch(config-tacacs+)# server
{ipv4-address | ipv6-address |
host-name}
Step 3
If the specified TACACS+ server is not found, configure
it using the tacacs-server host command and retry this
command.
(Optional)
Configures the monitoring dead time. The default is 0
minutes. The range is from 0 through 1440.
switch(config-tacacs+)# deadtime
minutes
Step 4
If the dead-time interval for a TACACS+ server
group is greater than zero (0), that value takes
precedence over the global dead-time value.
Note
Exits configuration mode.switch(config-tacacs+)# exit
Step 5
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
OL-16597-01 261
About Configuring TACACS+
Configuring TACACS+ Server Groups