# TACAC+ configure
**URL:** https://forum.networklessons.com/t/tacac-configure/2322
**Category:** Security
**Created:** [October 24, 2017, 9:14am UTC](https://forum.networklessons.com/t/tacac-configure/2322 "2017-10-24T09:14:50Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@tityaouch168](https://forum.networklessons.com/u/tityaouch168)
#### Post date: [October 24, 2017, 9:14am UTC](https://forum.networklessons.com/t/tacac-configure/2322/1 "2017-10-24T09:14:50Z")
Hi all,
did you used to configure TACACS+ with cisco N3K ? we try but when we telnet it still use local database user.
any suggestion plz help share.
---
### Author:  [@lagapidis](https://forum.networklessons.com/u/lagapidis)
#### Post date: [October 26, 2017, 10:09am UTC](https://forum.networklessons.com/t/tacac-configure/2322/2 "2017-10-26T10:09:49Z")
Hello Titya
The only thing I can suggest at this point is to verify that your configuration is correct using [this Cisco documentation](https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus3000/sw/security/503_u1_1/b_Cisco_n3k_security_cg_503_u1_1/b_Cisco_n3k_security_cg_503_u1_1_chapter_0100.pdf) for the specific requirements.
By default, the local database is used. Make sure you have indicated the location of the TACACS server and have placed that first in the `aaa authorization` command.
I hope this has been helpful!
Laz
---
### Author:  [@tityaouch168](https://forum.networklessons.com/u/tityaouch168)
#### Post date: [November 6, 2017, 4:55am UTC](https://forum.networklessons.com/t/tacac-configure/2322/3 "2017-11-06T04:55:39Z")
Hello lagapides,
our config as below but this time we can not remote to N3K both local and tacacs+ server
available only console. any help ?
```
feature tacacs+
tacacs-server host x.x.x.x
tacacs-server key xxxxxx
tacacs-server timeout 30
tacacs-server deadtime 1
aaa group server tacacs+ abc
aaa authentication login default group today
aaa authentication login console local
aaa authorization config-commands default group abc local
aaa authorization commands default group today local
aaa accounting default group abc
```
---
### Author:  [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [November 10, 2017, 12:19pm UTC](https://forum.networklessons.com/t/tacac-configure/2322/4 "2017-11-10T12:19:44Z")
One thing I see in your config is that you configure group “abc” and then specify group “today” :
```
aaa group server tacacs+ abc
aaa authentication login default group today
```
If you want to troubleshoot this, debugging is very helpful:
```
NX1# debug aaa ?
aaa-requests Aaa request debug
all Enable all the debug flags
conf-events Aaa configuration events
errors Aaa errors
events Aaa events debug
mts Configure Tx/Rx packets of MTS
```
Set it to “all” and you’ll probably see an error message when you attempt to authenticate.
---
### Author:  [@tityaouch168](https://forum.networklessons.com/u/tityaouch168)
#### Post date: [November 10, 2017, 2:34pm UTC](https://forum.networklessons.com/t/tacac-configure/2322/5 "2017-11-10T14:34:02Z")
For group name i already correct it.