Cisco MDS 9000 Series Configuration Manual page 102

Starting a Distribution Session on a Switch
(Optional) Disables TACACS+ configuration distribution in this switch (default).
Starting a Distribution Session on a Switch
A distribution session starts the moment you begin a RADIUS/TACACS+ server or global configuration. For
example, the following tasks start an implicit session:
• Specifying the global timeout for RADIUS servers.
• Specifying the global timeout for TACACS+ servers.
Note After you issue the first configuration command related to AAA servers, all server and global configurations
that are created (including the configuration that caused the distribution session start) are stored in a temporary
buffer, not in the running configuration.
Displaying the Session Status
Once the implicit distribution session has started, you can check the session status from Fabric Manager by
expanding Switches > Security > AAA, and selecting RADIUS or TACACS+.
Use the show radius command to see the distribution status on the CFS tab.
switch# show radius distribution status
distribution : enabled
session ongoing: yes
session owner: admin
session db: exists
merge protocol status: merge activation done
last operation: enable
last operation status: success
Once the implicit distribution session has started, you can check the session status using the show tacacs+
distribution status command.
switch# show tacacs+ distribution status
distribution : enabled
session ongoing: yes
session owner: admin
session db: exists
merge protocol status: merge activation done
last operation: enable
last operation status: success
Displaying the Pending Configuration to be Distributed
To display the RADIUS or TACACS+ global and/or server configuration stored in the temporary buffer use
the show radius pending command, follow these steps:
switch(config)# show radius pending-diff
Cisco MDS 9000 Series Security Configuration Guide, Release 8.x
84
Configuring Security Features on an External AAA Server