For information on Cisco Unified Wireless Network TACACS+ configurations and to change the user
roles, see Cisco Unified Wireless Network TACACS+ Configuration.
Note
You can also specify your SNMPv3 authentication and privacy protocol attributes as follows:
shell:roles="roleA roleB..." snmpv3:auth=SHA priv=AES-128
The SNMPv3 authentication protocol options are SHA and MD5. The privacy protocol options are AES-128
and DES. If you do not specify these options in the cisco-av-pair attribute, MD5 and DES are the default
authentication protocols.
For additional information, see the Configuring User Accounts and RBAC chapter in the System Management
Configuration Guide for your Cisco Nexus device.
Secure Login Enhancements
Secure Login Enhancements
The following secure login enhancements are supported in Cisco NX-OS:
•
Configuring Login Parameters
•
Configuration Examples for Login Parameters
• Restricting Sessions Per User—Per User Per Login
•
Enabling the Password Prompt for User Name
•
Configuring Share Key Value for using RADIUS/TACACS+
Configuring Login Parameters
Use this task to configure your Cisco NX-OS device for login parameters that help detect suspected DoS
attacks and slow down dictionary attacks.
All login parameters are disabled by default. You must enter the login block-for command, which enables
default login functionality, before using any other login commands. After the login block-for command is
enabled, the following default is enforced:
•
All login attempts made through Telnet or SSH are denied during the quiet period; that is, no ACLs are
exempt from the login period until the login quiet-mode access-class command is entered.
Procedure
PurposeCommand or Action
Enters global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 1
Cisco Nexus 3600 NX-OS Security Configuration Guide, Release 7.x
21
Configuring AAA
Secure Login Enhancements
To Next Page
Loading...
