Configuring Server Groups - Cisco DS-X9530-SF1-K9 - Supervisor-1 Module - Control Processor Configuration Manual

Configuring Server Groups

S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m .
Example 28-6 Displays AAA Authentication Login Information
switch# show aaa authentication login error-enable
enabled
Example 28-7 Displays Configured TACACS+ Server Groups
switch# show tacacs-server groups
total number of groups:2
following TACACS+ server groups are configured:
Example 28-8 Displays All AAA Server Groups
switch# show aaa groups
radius
TacServer
Configuring Server Groups
You can specify one or more remote AAA servers to authenticate users using server groups. All members
of a group must belong to the same protocol, either RADIUS or TACACS+. The servers are tried in the
same order in which you configure them.
You can configure these server groups at any time but they only take effect when you apply them to a
AAA service. You configure AAA policies for CLI users or Fabric Manager or Device Manager users.
To specify the TACACS+ server order within a group, follow these steps:
Command
Step 1
switch# config t
Step 2
switch(config)# aaa group server tacacs+
TacacsServer1
switch(config-tacacs+)#
switch(config)# no aaa group server
tacacs+ TacacsServer19
Step 3
switch(config-tacacs+)# server ServerA
Step 4
switch(config-tacacs+)# server ServerB
switch(config-tacacs+)# no server ServerZ
Cisco MDS 9000 Family CLI Configuration Guide
28-14
group TacServer:
server 171.71.58.91 on port 2
group TacacsServer1:
server ServerA on port 49
server ServerB on port 49:
Chapter 28 Configuring RADIUS and TACACS+
Purpose
Enters configuration mode.
Creates a server group named TacacsServer1 and
enters the submode for that group.
Deletes the server group called TacacsServer19 from
the authentication list.
Configures ServerA to be tried first within the server
group called the TacacsServer1.
Tip If the specified TACACS+ server is not found,
configure it using the tacacs-server host
command and retry this command.
Configures ServerB to be tried second within
TacacsServer1.
Deletes ServerZ within the TacacsServer1 list of
servers.
OL-8222-01, Cisco MDS SAN-OS Release 3.x