This section provides the notes on Cisco Nexus Configuration.

• When logging on to the switch using SSH/Telnet, the user gets the default role network-operator, which grants read only permissions to the user.
• Configure the RSA Authentication Manager or identity router to send RADIUS attribute to grant authorization access level to the user the according to the attribute value, which should match a role configured or preconfigured on the Nexus Switch.
• By default, the Nexus RADIUS server’s idle-time is set to 0, which means it does not monitor the servers by default. This needs to be changed according to your requirement.

KAPACNEXUS001(config)# radius-server host 192.168.100.50 test idle-time 1

• You must set the fallback to the AAA authentication using RADIUS to use local (for example, if the RADIUS server is not reachable) to prevent switch lockdown.

Return to the main page.