Configuring Tacacs+ Server Monitoring Parameters - Cisco MDS 9000 Series Configuration Manual

Configuring Security Features on an External AAA Server
Step 2
Power cycle the switch.
Step 3 Press the Ctrl-] key sequence when the switch begins its Cisco NX-OS software boot sequence to enter the
switch(boot)# prompt mode.
Ctrl-]
switch(boot)#
Step 4 Change to configuration mode.
switch(boot)# configure terminal
Step 5 Issue the admin-password command to reset the administrator password. This will disable remote authentication
for login through console, if enabled. This is done to ensure that admin is able to login through console with
new password after password recovery. Telnet/SSH authentication will not be affected by this.
switch(boot-config)# admin-password <new password>
WARNING! Remote Authentication for login through console will be disabled#
For information on strong passwords, see the
Step 6 Exit to the EXEC mode.
switch(boot-config)# admin-password <new password>
Step 7 Issue the load command to load the Cisco NX-OS software.
switch(boot)# load bootflash:m9500-sf1ek9-mz.2.1.1a.bin
Caution
Step 8
Log in to the switch using the new administrator password.
switch login: admin
Password:<newpassword>
Step 9 Reset the new password to ensure that is it is also the SNMP password for Fabric Manager.
switch# configure terminal
switch(config)# username admin password<new password>
switch(config)# exit
switch#
Step 10
Save the software configuration.
switch# copy running-config startup-config
Step 11
Insert the previously removed supervisor module into slot 6 in the chassis.

Configuring TACACS+ Server Monitoring Parameters

A Cisco MDS switch uses the Terminal Access Controller Access Control System Plus (TACACS+) protocol
to communicate with remote AAA servers. You can configure multiple TACACS+ servers and set timeout
values.
If you boot a system image that is older than the image you used to store the configuration and do
not use the install all command to boot the system, the switch erases the binary configuration and
uses the ASCII configuration. When this occurs, you must use the init system command to recover
your password.
Configuring TACACS+ Server Monitoring Parameters
Checking Password Strength, on page 25
Cisco MDS 9000 Series Security Configuration Guide, Release 8.x
section.
67