Cisco Nexus 9000 Series - Configuring AAA Authorization on TACACS+ Servers

PurposeCommand or Action
switch# configure terminal
switch(config)#
Enables ASCII authentication. The default is disabled.aaa authentication login ascii-authentication
Example:
Step 2
switch(config)# aaa authentication login
ascii-authentication
Displays the pending TACACS+ configuration.(Optional) show tacacs+ {pending | pending-diff}
Example:
Step 3
switch(config)# show tacacs+ pending
Applies the TACACS+ configuration changes in the
temporary database to the running configuration.
(Optional) tacacs+ commit
Example:
Step 4
switch(config)# tacacs+ commit
Exits configuration mode.exit
Example:
Step 5
switch(config)# exit
switch#
Displays the TACACS+ server configuration.(Optional) show tacacs-server
Example:
Step 6
switch# show tacacs-server
Copies the running configuration to the startup
configuration.
(Optional) copy running-config startup-config
Example:
Step 7
switch# copy running-config startup-config
Configuring AAA Authorization on TACACS+ Servers
You can configure the default AAA authorization method for TACACS+ servers.
Before you begin
Enable TACACS+.
SUMMARY STEPS
1. configure terminal
2. aaa authorization ssh-certificate default {group group-list [none] | local | none}
3. exit
4. (Optional) show aaa authorization [all]
5. (Optional) copy running-config startup-config
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
89
Configuring TACACS+
Configuring AAA Authorization on TACACS+ Servers