Table of Contents
Advertisement
Chapter 28
Configuring RADIUS and TACACS+
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m .
Cisco MDS SAN-OS does not support all numeric usernames, whether created with TACACS+ or
Caution
RADIUS, or created locally. Local users with all numeric names cannot be created. If an all numeric
username exists on an AAA server and is entered during login, the user is not logged in.
Note
Even if local is not specified as one of the options, it is tried when all other configured options fail.
Table 28-1
.
Table 28-1
AAA Service Configuration Option
Telnet or SSH login (Cisco MDS Fabric Manager
and Device Manager login)
Console login
iSCSI authentication
FC-SP authentication
Accounting
Error-Enabled Status
When you log in, the login is processed by rolling over to local user database if the remote AAA servers
do not respond. In such cases, the following message is displayed on the user's terminal—if you have
enabled the error-enabled feature:
Remote AAA servers unreachable; local authentication done.
To enable this message display, use the aaa authentication login error-enable command.
To disable this message display, use the no aaa authentication login error-enable command.
To view the current display status, use the show aaa authentication login error-enable command (see
Example
Example 28-1 Displays AAA Authentication Login Information
switch# show aaa authentication login error-enable
enabled
Configuring RADIUS
Cisco MDS 9000 Family switches can use the RADIUS protocol to communicate with remote AAA
servers. You can configure multiple RADIUS servers and server groups and set timeout and retry counts.
This section defines the RADIUS operation, identifies its network environments, and describes its
configuration possibilities.
OL-8222-01, Cisco MDS SAN-OS Release 3.x
provides the related CLI command for each AAA service configuration option.
AAA Service Configuration Commands
28-6).
Related Command
aaa authentication login default
aaa authentication login console
aaa authentication iscsi default
aaa authentication dhchap default
aaa accounting default
Cisco MDS 9000 Family CLI Configuration Guide
Configuring RADIUS
28-5
Advertisement
Table of Contents
