Send documentation comments to mdsfeedback-doc@cisco.com
41-22
Cisco MDS 9000 Family Fabric Manager Configuration Guide
OL-17256-03, Cisco MDS NX-OS Release 4.x
Chapter 41 Configuring RADIUS and TACACS+
AAA Server Distribution
• Merge Guidelines for RADIUS and TACACS+ Configurations, page 41-24
Note For an MDS switch to participate in AAA server configuration distribution, it must be running Cisco
MDS SAN-OS Release 2.0(1b) or later, or Cisco NX-OS 4.1(1).
Enabling AAA Server Distribution
Only switches where distribution is enabled can participate in the distribution activity.
To enable RADIUS server distribution using Fabric Manager, follow these steps:
Step 1 Expand Switches > Security > AAA, and then select RADIUS.
You see the RADIUS configuration in the Information pane.
Step 2 Click the CFS tab. You see the RADIUS CFS configuration.
Step 3 Choose enable from the Admin drop-down list for all switches that you want to enable CFS for
RADIUS.
Step 4 Click Apply Changes to distribute these changes through the fabric.
.
To enable TACACS+ server distribution using Fabric Manager, follow these steps:
Step 1 Expand Switches > Security > AAA, and then select TACACS+.
You see the TACACS+ configuration in the Information pane.
Step 2 Click the CFS tab.
You see the TACACS+ CFS configuration.
Step 3 Choose enable from the Admin drop-down list for all switches that you want to enable CFS on for
TACACS+ .
Step 4 Click Apply Changes to distribute these changes through the fabric.
.
Starting a Distribution Session on a Switch
A distribution session starts the moment you begin a RADIUS/TACACS+ server or global configuration.
For example, the following tasks start an implicit session:
• Specifying the global timeout for RADIUS servers.
• Specifying the global timeout for TACACS+ servers.
Note After you issue the first configuration command related to AAA servers, all server and global
configurations that are created (including the configuration that caused the distribution session start) are
stored in a temporary buffer, not in the running configuration.