Prerequisites For Remote Aaa - Cisco N5010P-N2K-BE Software Configuration Manual

Chapter 16 Configuring AAA
S e n d f e e d b a c k t o n x 5 0 0 0 - d o c f e e d b a c k @ c i s c o . c o m
Figure 16-1
"No more server groups left" means that there is no response from any server in all server groups.
Note
"No more servers left" means that there is no response from any server within this server group.

Prerequisites for Remote AAA

Remote AAA servers have the following prerequisites:
•
•
•
OL-16597-01
Authorization and Authentication Flow for User Login
Start
Incoming
Incoming
access
access
request to
request to
switch
switch
Remote
First or
next server
lookup
Found a
RADIUS server
RADIUS
Lookup
No
response
Accept
Access
permitted
At least one RADIUS or TACACS+ server must be IP reachable (see the
Server Hosts" section on page 17-5
page 18-5)
The Nexus 5000 Series switch is configured as a client of the AAA servers.
The preshared secret key is configured on the Nexus 5000 Series switch and on the remote AAA
servers.
Local
No more
Local
servers left
database
lookup
Failure
Denied
access
Failure
and the "Configuring TACACS+ Server Hosts" section on
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
Prerequisites for Remote AAA
Access
Success
permitted
"Configuring RADIUS
16-5