Cisco Nexus 3600 NX-OS - Configuring Share Key Value for Using RADIUS;TACACS; Enabling the Password Prompt for User Name

Enabling the Password Prompt for User Name
Procedure
PurposeCommand or Action
Enters global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 1
Enables the login knob. If this command is enabled
and the user enters the username command without
[no] password prompt username
Example:
Switch(config)# password prompt
username
Step 2
the password option, then the password is prompted.
The password accepts hidden characters. Use the no
form of this command to disable the login knob.
Exits to privileged EXEC mode.exit
Example:
Switch(config)# exit
Step 3
Configuring Share Key Value for using RADIUS/TACACS+
The shared secret you configure for remote authentication and accounting must be hidden. For the radius-server
key and tacacs-server key commands, a separate command to generate encrypted shared secret can be used.
Procedure
PurposeCommand or Action
Enters global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 1
Configures RADIUS and TACACS shared secret with
key type 7. While generating an encrypted shared
secret, user input is hidden.
generate type7_encrypted_secret
Example:
Switch(config)# generate
type7_encrypted_secret
Step 2
You can generate encrypted equivalent of
plain text separately and can configure the
encrypted shared secret later.
Note
Cisco Nexus 3600 NX-OS Security Configuration Guide, Release 7.x
24
Configuring AAA
Secure Login Enhancements