Cisco MDS 9000 Series Configuration Manual page 96

Displaying TACACS+ Server Details
• Cisco ACS TACACS+
shell:roles="network-admin"
shell:roles*"network-admin"
cisco-av-pair*shell:roles="network-admin"
cisco-av-pair*shell:roles*"network-admin"
cisco-av-pair=shell:roles*"network-admin"
• Open TACACS+
cisco-av-pair*shell:roles="network-admin"
cisco-av-pair=shell:roles*"network-admin"
Displaying TACACS+ Server Details
Use the show aaa and show tacacs-server commands to display information about TACACS+ server
configuration in all switches in the Cisco MDS 9000 Family as shown in the following examples.
Displays Configured TACACS+ Server Information
switch# show tacacs-server
Global TACACS+ shared secret:***********
timeout value:30
total number of servers:3
following TACACS+ servers are configured:
Displays AAA Authentication Information
switch# show aaa authentication
Displays AAA Authentication Login Information
switch# show aaa authentication login error-enable
enabled
Displays Configured TACACS+ Server Groups
switch# show tacacs-server groups
total number of groups:2
following TACACS+ server groups are configured:
Cisco MDS 9000 Series Security Configuration Guide, Release 8.x
78
171.71.58.91:
available on port:2
cisco.com:
available on port:49
171.71.22.95:
available on port:49
TACACS+ shared secret:*****
default: group TacServer local none
console: local
iscsi: local
dhchap: local
group TacServer:
server 171.71.58.91 on port 2
group TacacsServer1:
Configuring Security Features on an External AAA Server