| 12345678910111213141516171819202122232425262728293031323334353637383940 |
- ---
- - name: Enable TACACS+ feature
- nxos_feature:
- feature: tacacs+
- state: enabled
- tags: aaa
- - name: Add TACACS+ hosts
- nxos_aaa_server_host:
- address: "{{ item.host }}"
- encrypt_type: "0"
- host_timeout: "{{ tacacs_host_timeout }}"
- key: "{{ tacacs_key }}"
- server_type: tacacs
- with_items: "{{ tacacs_servers }}"
- tags: aaa
- - name: Add AAA group server
- nxos_config:
- lines:
- - server {{ item.host }}
- parents: aaa group server tacacs+ {{ tacacs_group_name }}
- with_items: "{{ tacacs_servers }}"
- tags: aaa
- - name: Add additional TACACS+ group config
- nxos_config:
- lines:
- - deadtime 10
- - source-interface {{ tacacs_source_interface }}
- - use-vrf {{ tacacs_vrf }}
- parents: aaa group server tacacs+ {{ tacacs_group_name }}
- tags: aaa
- - name: Configure authentication order
- nxos_config:
- lines:
- - aaa authentication login default group {{ tacacs_group_name }} local
- - aaa authentication login console none
- tags: aaa
|
