Enabling Aaa Server Distribution; Starting A Distribution Session On A Switch - Cisco AP775A - Nexus Converged Network Switch 5010 Configuration Manual

AAA Server Distribution
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
•
For an MDS switch to participate in AAA server configuration distribution, it must be running Cisco
Note
MDS SAN-OS Release 2.0(1b) or later, or Cisco NX-OS 4.1(1).

Enabling AAA Server Distribution

Only switches where distribution is enabled can participate in the distribution activity.
To enable RADIUS server distribution using Fabric Manager, follow these steps:
Expand Switches > Security > AAA, and then select RADIUS.
Step 1
You see the RADIUS configuration in the Information pane.
Click the CFS tab. You see the RADIUS CFS configuration.
Step 2
Choose enable from the Admin drop-down list for all switches that you want to enable CFS for
Step 3
RADIUS.
Click Apply Changes to distribute these changes through the fabric.
Step 4
.
To enable TACACS+ server distribution using Fabric Manager, follow these steps:
Expand Switches > Security > AAA, and then select TACACS+.
Step 1
You see the TACACS+ configuration in the Information pane.
Click the CFS tab.
Step 2
You see the TACACS+ CFS configuration.
Choose enable from the Admin drop-down list for all switches that you want to enable CFS on for
Step 3
TACACS+.
Click Apply Changes to distribute these changes through the fabric.
Step 4
.

Starting a Distribution Session on a Switch

A distribution session starts the moment you begin a RADIUS/TACACS+ server or global configuration.
For example, the following tasks start an implicit session:
•
•
After you issue the first configuration command related to AAA servers, all server and global
Note
configurations that are created (including the configuration that caused the distribution session start) are
stored in a temporary buffer, not in the running configuration.
Cisco MDS 9000 Family Fabric Manager Configuration Guide
41-22
Merge Guidelines for RADIUS and TACACS+ Configurations, page 41-24
Specifying the global timeout for RADIUS servers.
Specifying the global timeout for TACACS+ servers.
Chapter 41 Configuring RADIUS and TACACS+
OL-17256-03, Cisco MDS NX-OS Release 4.x