Cisco MDS 9000 Series Configuration Manual page 99

Configuring Security Features on an External AAA Server
Step 10
switch(config-radius)# server ServerB
Configures ServerB to be tried second within the server group RadiusServer1.
Step 11 switch(config-radius)# deadtime 30
Configures the monitoring dead time to 30 minutes. The range is 0 through 1440.
Note
Step 12
switch(config-radius)# no deadtime 30
(Optional) Reverts to the default value (0 minutes).
Note
Example
To verify the configured server group order, use theshow radius-server groups command:
switch# show radius-server groups
total number of groups:2
following RAIDUS server groups are configured:
About Configuring TACACS+ Server Groups
To configure a TACACS+ server group, follow these steps:
Procedure
Step 1
switch# configure terminal
Enters configuration mode.
Step 2 switch(config)# aaa group server tacacs+ TacacsServer1
switch(config-tacacs+)#
Creates a server group named TacacsServer1 and enters the submode for that group.
Step 3
switch(config)# no aaa group server tacacs+ TacacsServer1
(Optional) Deletes the server group called TacacsServer1 from the authentication list.
If the dead-time interval for an individual RADIUS server is greater than 0, that value takes
precedence over the value set for the server group.
If the dead-time interval for both the RADIUS server group and an individual TACACS+ server in
the RADIUS server group is set to 0, the switch does not mark the RADIUS server as dead when
it is found to be unresponsive by periodic monitoring. Also, the switch does not perform dead server
monitoring for that RADIUS server. (See the
on page 58 section).
group RadServer:
server 10.71.58.91 on port 2
group RadiusServer1:
server ServerA on port 49
server ServerB on port 49:
Configuring RADIUS Server Monitoring Parameters,
Cisco MDS 9000 Series Security Configuration Guide, Release 8.x
About Configuring TACACS+ Server Groups
81