Purpose
Command or Action
switch#
copy running-config startup-config
Related Topics
, on page 73
, on page 77
Configuring Global Keys
You can configure secret keys at the global level for all servers used by the Cisco NX-OS device.
A secret key is a shared secret text string between the Cisco NX-OS device and the server hosts.
Before you begin
Enable .
Obtain the secret key values for the remote servers.
SUMMARY STEPS
1.
configure terminal
2.
tacacs-server key
[
0
|
6
|
7
]
key-value
3.
exit
4.
(Optional)
show tacacs-server
5.
(Optional)
copy running-config startup-config
DETAILED STEPS
Purpose
Command or Action
Enters global configuration mode.
configure terminal
Example:
Step 1
switch#
configure terminal
switch(config)#
Specifies a key for all server. You
can specify that the
key-value
is in clear text format (
0
), is
tacacs-server key
[
0
|
6
|
7
]
key-value
Example:
Step 2
type-6 encrypted (
6
), or is type-7 encrypted (
7
). The Cisco
switch(config)#
tacacs-server key 0 QsEfThUkO
NX-OS software encrypts a clear text key before saving it
to the running configuration. The default format is clear
text. The maximum length is 63 characters.
Example:
switch(config)#
tacacs-server key 7 "fewhg”
By default, no secret key is configured.
If you already configured a shared secret using
the
generate type7_encrypted_secret
command, enter it in quotation marks, as shown
in the second example. For more information,
see
Configuring the Shared Secret for RADIUS
Note
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
75
Configuring
Configuring Global Keys
