Cisco Cisco Nexus 5010 Switch Libro bianco

Pagina di 56
White Paper 
© 2010 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. 
Page 22 of 56
Configuring TACACS+ Authentication 
The Cisco Nexus 5000 Series supports both the RADIUS and TACACS+ protocols. It also supports authentication, 
authorization, and accounting (AAA) services to verify the identity of, grant access to, and track the actions of 
engineers who manage the Cisco Nexus 5000 Series fabric.  
The TACACS+ or RADIUS server authenticates the user and returns to the switch the correct role in which the user 
should be placed. The user will then be limited to the functions and features contained in that role. 
The TACACS+ feature is disabled by default. To enable TACACS+ from the CLI, enter: 
switch# config terminal 
switch(config)# feature tacacs+ 
switch(config)# end 
 
To enable the feature through the GUI, follow these steps: 
1. 
In the Device Manager, choose Admin > Feature Control. 
 
 
2. 
In the Feature Control dialog box that appears, select TACACS and choose Action > enable to enable the 
TACACS+ feature.