About The Default Tacacs+ Server Encryption Type And Preshared Key; Setting The Default Tacacs+ Server Encryption Type And Preshared Key; Setting The Default Tacacs+ Server Timeout Interval And Retransmits - Cisco AP775A - Nexus Converged Network Switch 5010 Configuration Manual

Chapter 41 Configuring RADIUS and TACACS+
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
•
•
•

About the Default TACACS+ Server Encryption Type and Preshared Key

You need to configure the TACACS+ preshared key to authenticate the switch to the TACACS+ server.
The length of the key is restricted to 64 characters and can include any printable ASCII characters (white
spaces are not allowed). You can configure a global key to be used for all TACACS+ server
configurations on the switch.
You can override this global key assignment by explicitly using the key option when configuring and
individual TACACS+ server.

Setting the Default TACACS+ Server Encryption Type and Preshared Key

To configure the default TACACS+ server encryption type and preshared key using Fabric Manager,
follow these steps:
Step 1 Expand Switches > Security > AAA, and then select TACACS+.
You see the TACACS+ configuration in the Information pane.
If the Defaults tab is dimmed, click the CFS tab.
Step 2
Click the Defaults tab.
Step 3
You see the TACACS+ default settings.
Select plain or encrypted from the AuthType drop-down menu and set the key in the Auth Key field.
Step 4
Click the Apply Changes icon to save the changes.
Step 5

Setting the Default TACACS+ Server Timeout Interval and Retransmits

By default, a switch retries a TACACS+ server only once. This number can be configured. The maximum
is five retries per server. You can also configure the timeout value for the TACACS+ server.
To configure the number of retransmissions and the time between retransmissions to the TACACS+
servers using Fabric Manager, follow these steps:
Expand Switches > Security > AAA, and then select TACACS+.
Step 1
You see the TACACS+ configuration in the Information pane.
Step 2 Choose the Defaults tab. (If the Defaults tab is disabled, click the CFS tab first.)
You see the TACACS+ default settings.
Step 3 Supply values for the Timeout and Retransmits fields for authentication attempts.
OL-17256-03, Cisco MDS NX-OS Release 4.x
Timeout value
Number of retransmission attempts
Allowing the user to specify a TACACS+ server at login
Configuring TACACS+ Server Monitoring Parameters
Cisco MDS 9000 Family Fabric Manager Configuration Guide
41-15