Local Aaa Services - Cisco MDS 9000 Series Configuration Manual

Local AAA Services

(Optional) Disables MSCHAPv2 login authentication.
Example
Note • Password aging, MSCHAPv2 and MSCHAP authentication can fail if one of these authentication
• A warning message is issued when you execute a command to enable MSCHAPv2 authentication
You can use the show aaa authentication login mschap command to display the MSCHAP
authentication configuration.
switch# show aaa authentication login mschap
mschap is disabled
You can use the show aaa authentication login mschapv2 command to display the MSCHAPv2
authentication configuration.
switch# show aaa authentication login mschapv2
mschapv2 is enabled
Local AAA Services
The system maintains the username and password locally and stores the password information in encrypted
form. You are authenticated based on the locally stored user information.
Use the username command to configure local users and their roles.
Use the show accounting log command to view the local accounting log as shown in the following example.
Displays the Accounting Log Information
switch# show accounting log
Thu Dec 10 06:19:21 2009:type=update:id=console0:user=root:cmd=enabled telnet
Thu Dec 10 06:19:21 2009:type=update:id=console0:user=root:cmd=configure terminal ; feature
telnet
(SUCCESS)
Thu Dec 10 06:19:35 2009:type=start:id=171.69.16.56@pts/1:user=admin:cmd=
Thu Dec 10 06:20:16 2009:type=stop:id=171.69.16.56@pts/1:user=admin:cmd=shell te
rminated gracefully
Thu Dec 10 06:20:20 2009:type=stop:id=console0:user=root:cmd=shell terminated gr
acefully
Thu Dec 10 06:29:37 2009:type=start:id=72.163.177.168@pts/1:user=admin:cmd=
Thu Dec 10 06:29:42 2009:type=update:id=72.163.177.168@pts/1:user=admin:cmd=pwd
(SUCCESS)
Thu Dec 10 06:32:49 2009:type=start:id=72.163.190.8@pts/2:user=admin:cmd=
Cisco MDS 9000 Series Security Configuration Guide, Release 8.x
90
is not disabled.
on the TACACS+ server, and the configuration fails.
Configuring Security Features on an External AAA Server