Error-Enabled Status; Aaa Server Monitoring - HP Cisco MDS 9020 - Fabric Switch Configuration Manual

Chapter 32 Configuring RADIUS and TACACS+
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
Cisco MDS SAN-OS does not support all numeric usernames, whether created with TACACS+ or
Caution
RADIUS, or created locally. Local username with all numerics cannot be created. If an all numeric
username exists on an AAA server and is entered during login, the user is not logged in.
Even if local is not specified as one of the options, it is tried when all other configured options fail.
Note
Table 32-1
.
Table 32-1
AAA Service Configuration Option
Telnet or SSH login (Cisco Fabric Manager and
Device Manager login)
Console login
iSCSI authentication
FC-SP authentication
Accounting

Error-Enabled Status

When you log in, the login is processed by rolling over to local user database if the remote AAA servers
do not respond. In this situation, the following message is displayed on the your screen—if you have
enabled the error-enabled feature:
Remote AAA servers unreachable; local authentication done.
To enable this message display, use the aaa authentication login error-enable command.
To disable this message display, use the no aaa authentication login error-enable command.
To view the current display status, use the show aaa authentication login error-enable command (see
Example
Example 32-1 Displays AAA Authentication Login Information
switch# show aaa authentication login error-enable
enabled

AAA Server Monitoring

An unresponsive AAA server introduces a delay in the processing of AAA requests. An MDS switch can
periodically monitor an AAA server to check whether it is responding (or alive) to save time in
processing AAA requests. The MDS switch marks unresponsive AAA servers as dead and does not send
AAA requests to any dead AAA servers. An MDS switch periodically monitors dead AAA servers and
brings them to the alive state once they are responding. This monitoring process verifies that an AAA
OL-16184-01, Cisco MDS SAN-OS Release 3.x
provides the related CLI command for each AAA service configuration option.
AAA Service Configuration Commands
32-1).
Switch AAA Functionalities
Related Command
aaa authentication login default
aaa authentication login console
aaa authentication iscsi default
aaa authentication dhchap default
aaa accounting default
Cisco MDS 9000 Family CLI Configuration Guide
32-5