Cisco Nexus 9000 Series - Obtaining Documentation and Submitting a Service Request

Configuring the Timeout Interval for a TACACS+ Server 81
Configuring TCP Ports 82
Configuring Global Periodic TACACS+ Server Monitoring 83
Configuring Periodic TACACS+ Server Monitoring on Individual Servers 85
Configuring the TACACS+ Dead-Time Interval 87
Configuring ASCII Authentication 88
Configuring AAA Authorization on TACACS+ Servers 89
Configuring Command Authorization on TACACS+ Servers 90
Testing Command Authorization on TACACS+ Servers 92
Enabling and Disabling Command Authorization Verification 93
Configuring Privilege Level Support for Authorization on TACACS+ Servers 94
Permitting or Denying Commands for Users of Privilege Roles 96
Manually Monitoring TACACS+ Servers or Groups 97
Disabling TACACS+ 98
Monitoring TACACS+ Servers 99
Clearing TACACS+ Server Statistics 99
Verifying the TACACS+ Configuration 100
Configuration Examples for TACACS+ 100
Where to Go Next 102
Additional References for TACACS+ 102
Configuring LDAP 105
CHAPTER 6
About LDAP 105
LDAP Authentication and Authorization 105
LDAP Operation for User Login 106
LDAP Server Monitoring 107
Vendor-Specific Attributes for LDAP 107
Cisco VSA Format for LDAP 107
Virtualization Support for LDAP 108
Licensing Requirements for LDAP 108
Prerequisites for LDAP 108
Guidelines and Limitations for LDAP 108
Default Settings for LDAP 109
Configuring LDAP 109
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
vii
Contents