Configuring Aaa Server Monitoring Parameters Globally - Cisco MDS 9000 Series Configuration Manual

Configuring Security Features on an External AAA Server

Configuring AAA Server Monitoring Parameters Globally

The AAA server monitoring parameters can be configured globally for all servers or individually for a specific
server. This section explains how the global configuration can be set. The global configurations will apply to
all servers that do not have individual monitoring parameters defined. For any server, the individual test
parameter defined for that particular server will always get precedence over the global settings.
Use the following commands to configure the global monitoring parameters for RADIUS servers:
Procedure
Step 1 switch# configure terminal
switch(config)#
Enters configuration mode.
Step 2
switch(config)# radius-server deadtime 10
Sets global deadtime for RADIUS servers to 10 minutes.
Acceptable Range: 0 to 1440 minutes.
Step 3 switch(config)# radius-server timeout 20f
Sets global timeout for RADIUS servers to 20 seconds.
Acceptable Range: 1 to 60 seconds.
Step 4 switch(config)# radius-server retransmit 2
Sets global retransmit count for RADIUS servers to 2.
Acceptable Range 0 to 5
Step 5
switch(config)# radius-server test username username password password idle-time time
Globally configures test parameters for the RADIUS servers.
Step 6
switch(config)# radius-server test username username password password no
Disables global test parameters for the RADIUS servers.
Example
Note Replace "radius" with "tacacs" in the steps above to get equivalent commands for TACACS server
global test parameter configurations.
The Global AAA Server Monitoring Parameters observe the following behavior:
• When a new AAA server is configured it is monitored using the global test parameters, if defined.

Configuring AAA Server Monitoring Parameters Globally

Cisco MDS 9000 Series Security Configuration Guide, Release 8.x
41