About Tacacs+ Servers; Configuring A Tacacs+ Server - HP Cisco MDS 9216 - Fabric Switch Configuration Manual

Configuring TACACS+ Server Monitoring Parameters
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
Click the Apply Changes icon to save the changes.
Step 4

About TACACS+ Servers

By default, the TACACS+ feature is disabled in all switches in the Cisco MDS 9000 Family. Fabric
Manager or Device Manager enables the TACACS+ feature automatically when you configure a
TACACS+ server.
If a secret key is not configured for a configured server, a warning message is issued if a global key is
not configured. If a server key is not configured, the global key (if configured) is used for that server.
Note Prior to Cisco MDS SAN-OS Release 2.1(2), you can use the dollar sign ($) in the key but the key must
be enclosed in double quotes, for example "k$". The percent sign (%) is not allowed. In Cisco MDS
SAN-OS Release 2.1(2) and later, you can use the dollar sign ($) without double quotes and the percent
sign (%) in global secret keys.
You can configure global values for the secret key for all TACACS+ servers.
If secret keys are configured for individual servers, those keys override the globally configured key.
Note

Configuring a TACACS+ Server

To configure a TACACS+ server and all its options using Fabric Manager, follow these steps:
Step 1 Expand Switches > Security > AAA, and then select TACACS+.
You see the TACACS+ configuration in the Information pane.
Step 2 Choose the Servers tab.
You see any existing TACACS+ servers.
Step 3 Click Create Row to add a new TACACS+ server.
You see the Create TACACS+ Server dialog box as shown in
Cisco MDS 9000 Family CLI Configuration Guide
41-16
Chapter 41 Configuring RADIUS and TACACS+
Figure 41-5.
OL-16184-01, Cisco MDS SAN-OS Release 3.x