Enabling Aaa Server Distribution; Starting A Distribution Session On A Switch - HP Cisco MDS 9216 - Fabric Switch Configuration Manual

AAA Server Distribution
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
•
For an MDS switch to participate in AAA server configuration distribution, it must be running Cisco
Note
MDS SAN-OS Release 2.0(1b) or later.

Enabling AAA Server Distribution

Only switches where distribution is enabled can participate in the distribution activity.
To enable RADIUS server distribution using Fabric Manager, follow these steps:
Expand Switches > Security > AAA,and then select RADIUS.
Step 1
You see the RADIUS configuration in the Information pane.
Click the CFS tab. You see the RADIUS CFS configuration.
Step 2
Choose enable from the Admin drop-down list for all switches that you want to enable CFS for
Step 3
RADIUS.
Click Apply Changes to distribute these changes through the fabric.
Step 4
.
To enable TACACS+ server distribution using Fabric Manager, follow these steps:
Expand Switches > Security > AAA, and then select TACACS+.
Step 1
You see the TACACS+ configuration in the Information pane.
Choose the CFS tab.
Step 2
You see the TACACS+ CFS configuration.
Step 3 Choose enable from the Admin drop-down list for all switches that you want to enable CFS on for
TACACS+.
Click Apply Changes to distribute these changes through the fabric.
Step 4
.

Starting a Distribution Session on a Switch

A distribution session starts the moment you begin a RADIUS/TACACS+ server or global configuration.
For example, the following tasks start an implicit session:
•
•
Note After you issue the first configuration command related to AAA servers, all server and global
configurations that are created (including the configuration that caused the distribution session start) are
stored in a temporary buffer, not in the running configuration.
Cisco MDS 9000 Family CLI Configuration Guide
41-22
Merge Guidelines for RADIUS and TACACS+ Configurations, page 41-24
Specifying the global timeout for RADIUS servers.
Specifying the global timeout for TACACS+ servers.
Chapter 41 Configuring RADIUS and TACACS+
OL-16184-01, Cisco MDS SAN-OS Release 3.x