Configuring Test Username; Configuring The Dead Timer - HP Cisco MDS 9020 - Fabric Switch Configuration Manual

Configuring TACACS+
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
To configure the idle timer, follow these steps:
Command
Step 1
switch# config t
Step 2
switch(config)# tacacs-server host 10.1.1.1
test idle-time 20
Step 3
switch(config)# no tacacs-server host
10.1.1.1 test idle-time 20

Configuring Test Username

You can configure a username and password for periodic TACACS+ server status testing. You do not
servers. You can use the default test username (test) and default password (test).
To configure the optional username and password for periodic TACACS+ server status testing, follow
these steps:
Command
Step 1
switch# config t
Step 2
switch(config)# tacacs-server host
10.1.1.1 test username testuser
switch(config)# no tacacs-server host
10.1.1.1 test username testuser
switch(config)# tacacs-server host
10.1.1.1 test username testuser password
Ur2Gd2BH

Configuring the Dead Timer

The dead timer specifies the interval that the MDS switch waits, after declaring a TACACS+ server is
dead, before sending out a test packet to determine if the server is now alive.
The default dead timer value is 0 minutes. TACACS+ server monitoring is not performed if the dead
Note
timer interval is 0 minutes, unless the TACACS+ server is a part of a bigger group with the dead-time
interval greater than 0 minutes. (See
If the dead timer of a dead TACACS+ server expires before it is sent a TACACS+ test message, that
Note
server is marked as alive again even if it is still not responding. To avoid this scenario, configure a test
user with a shorter idle time than the dead timer time.
To configure the dead timer, follow these steps:
Cisco MDS 9000 Family CLI Configuration Guide
32-22
Purpose
Enters configuration mode.
Configures the test idle time interval value in
minutes. The valid range is 1 to 1440 minutes.
Reverts to the default value (0 minutes).
Purpose
Enters configuration mode.
Configures the test user (testuser) with the default
password (test). The default username is test.
Removes the test user (testuser).
Configures the test user (testuser) and assigns a
strong password.
For guidelines for creating strong passwords, see
the "Characteristics of Strong Passwords" section
on page 39-11.
"Configuring RADIUS" section on page
Chapter 32 Configuring RADIUS and TACACS+
32-8.)
OL-16184-01, Cisco MDS SAN-OS Release 3.x