Error-Enabled Status; Aaa Server Monitoring - Cisco AP776A - Nexus Converged Network Switch 5020 Configuration Manual

Chapter 34 Configuring RADIUS and TACACS+
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
Cisco MDS NX-OS does not support all numeric usernames, whether created with TACACS+ or
Caution
RADIUS, or created locally. Local username with all numerics cannot be created. If an all numeric
username exists on an AAA server and is entered during login, the user is not logged in.
Even if local is not specified as one of the options, it is tried when all other configured options fail.
Note
Table 34-1
.
Table 34-1
AAA Service Configuration Option
Telnet or SSH login (Cisco Fabric Manager and
Device Manager login)
Console login
iSCSI authentication
FC-SP authentication
Accounting

Error-Enabled Status

When you log in, the login is processed by rolling over to local user database if the remote AAA servers
do not respond. In this situation, the following message is displayed on your screen if you have enabled
the error-enabled feature:
Remote AAA servers unreachable; local authentication done.
To enable this message display, use the aaa authentication login error-enable command.
To disable this message display, use the no aaa authentication login error-enable command.
To view the current display status, use the show aaa authentication login error-enable command (see
Example
Example 34-1 Displays AAA Authentication Login Information
switch# show aaa authentication login error-enable
enabled

AAA Server Monitoring

An unresponsive AAA server introduces a delay in the processing of AAA requests. An MDS switch can
periodically monitor an AAA server to check whether it is responding (or alive) to save time in
processing AAA requests. The MDS switch marks unresponsive AAA servers as dead and does not send
AAA requests to any dead AAA servers. An MDS switch periodically monitors dead AAA servers and
brings them to the alive state once they are responding. This monitoring process verifies that an AAA
OL-18084-01, Cisco MDS NX-OS Release 4.x
provides the related CLI command for each AAA service configuration option.
AAA Service Configuration Commands
34-1).
Related Command
aaa authentication login default
aaa authentication login console
aaa authentication iscsi default
aaa authentication dhchap default
aaa accounting default
Cisco MDS 9000 Family CLI Configuration Guide
Switch AAA Functionalities
34-5