Chapter 17
Troubleshooting RADIUS and TACACS+
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
Verifying RADIUS Server Groups Using Fabric Manager
To verify or change the RADIUS server groups using Fabric Manager, follow these steps:
Step 1
Choose Switches > Security > AAA and click Create Row to create a server group.
Check the list of switches that you want to configure server groups on.
Step 2
Set the Server List field to a comma-separated list of RADIUS servers.
Step 3
Set the Deadtime field to configure the time that the switch waits before retesting a dead server. and click
Step 4
Apply to save these changes.
Verifying RADIUS Server Groups Using the CLI
To verify or change the RADIUS server groups using the CLI, follow these steps:
Use the show running-config command to view the RADIUS configuration for the server groups.
Step 1
switch# show running-config | begin aaa
aaa group server radius RadiusGroup
aaa group server tacacs TacacsGroup
Use the aaa group server radius command to configure the RADIUS servers that you want in this server
Step 2
group.
Note
Verifying TACACS+ Server Groups Using Fabric Manager
To verify or change the TACACS+ server groups using Fabric Manager, follow these steps:
Choose Switches > Security > AAA and click Create Row to create a server group.
Step 1
Check the list of switches that you want to configure server groups on.
Step 2
Set the Server List field to a comma-separated list of TACACS+ servers.
Step 3
Step 4
Set the Deadtime field to configure the time that the switch waits before retesting a dead server. and click
Apply to save these changes.
OL-9285-05
server 10.1.1.1
server 10.2.3.4
server 11.5.4.3
server 11.6.5.4
CFS does not distribute AAA server groups. You must copy this configuration to all relevant
switches in the fabric.
Cisco MDS 9000 Family Troubleshooting Guide, Release 3.x
AAA Issues
17-9