This example shows how to enable tacacs+ and how to configure the tacacs+ server preshared keys to specify
remote AAA servers to authenticate server group TacServer1:
switch# configure terminal
switch(config)# feature tacacs+
switch(config)# tacacs-server key 7 "ikvhw10"
switch(config)# tacacs-server host 1.1.1.1
switch(config)# tacacs-server host 1.1.1.2
switch(config)# aaa group server tacacs+ TacServer1
switch(config-tacacs+)# server 1.1.1.1
switch(config-tacacs+)# server 1.1.1.2
Default Settings for TACACS+
The following table lists the default settings for TACACS+ parameters.
Table 8: Default TACACS+ Parameters
DefaultParameters
DisabledTACACS+
0 minutesDead-time interval
5 secondsTimeout interval
0 minutesIdle timer interval
testPeriodic server monitoring username
testPeriodic server monitoring password
Cisco Nexus 3600 NX-OS Security Configuration Guide, Release 7.x
58
Configuring TACACS+
Default Settings for TACACS+