Cisco Nexus 9000 Series - Enabling TACACS; Configuring TACACS+ Server Hosts

Related Topics
Enabling TACACS+ , on page 73
Enabling TACACS+
By default, the TACACS+ feature is disabled on the Cisco NX-OS device. You must explicitly enable the
TACACS+ feature to access the configuration and verification commands for authentication.
SUMMARY STEPS
1. configure terminal
2. feature tacacs+
3. exit
4. (Optional) copy running-config startup-config
DETAILED STEPS
PurposeCommand or Action
Enters global configuration mode.configure terminal
Example:
Step 1
switch# configure terminal
switch(config)#
Enables TACACS+.feature tacacs+
Example:
Step 2
switch(config)# feature tacacs+
Exits configuration mode.exit
Example:
Step 3
switch(config)# exit
switch#
Copies the running configuration to the startup
configuration.
(Optional) copy running-config startup-config
Example:
Step 4
switch# copy running-config startup-config
Configuring TACACS+ Server Hosts
To access a remote TACACS+ server, you must configure the IP address or the hostname for the TACACS+
server on the Cisco NX-OS device. You can configure up to 64 TACACS+ servers.
By default, when you configure a TACACS+ server IP address or hostname on the Cisco NX-OS device, the
TACACS+ server is added to the default TACACS+ server group. You can also add the TACACS+ server
to another TACACS+ server group.
Note
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
73
Configuring TACACS+
Enabling TACACS+