Cisco Nexus 5000 Series - Disabling Tacacs

Send feedback to nx5000-docfeedback@cisco.com
1-13
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
OL-16597-01
Chapter 1 Configuring TACACS+
Configuring TACACS+
Manually Monitoring TACACS+ Servers or Groups
To manually issue a test message to a TACACS+ server or to a server group, perform this task:
The following example shows how to manually issue a test message:
switch# test aaa server tacacs+ 10.10.1.1 user1 Ur2Gd2BH
switch# test aaa group TacGroup user2 As3He3CI
Disabling TACACS+
You can disable TACACS+.
Caution When you disable TACACS+, all related configurations are automatically discarded.
To disable TACACS+, perform this task:
Command Purpose
Step 1
switch# configure terminal
Enters configuration mode.
Step 2
switch(config)# tacacs-server deadtime
minutes
Configures the global dead-time interval. The default
value is 0 minutes. The range is from 1 to 1440
minutes.
Step 3
switch(config)# exit
Exits configuration mode.
Step 4
switch# show tacacs-server
(Optional) Displays the TACACS+ server
configuration.
Step 5
switch# copy running-config
startup-config
(Optional) Copies the running configuration to the
startup configuration.
Command Purpose
Step 1
switch# test aaa server tacacs+
{ipv4-address|ipv6-address|host-name} [vrf
vrf-name] username password
Sends a test message to a TACACS+ server to
confirm availability.
Step 1
switch# test aaa group group-name username
password
Sends a test message to a TACACS+ server group to
confirm availability.
Command Purpose
Step 1
switch# configure terminal
Enters configuration mode.
Step 2
switch(config)# feature tacacs+
Enables TACACS+.