Clearing Sessions; Merge Guidelines For Radius And Tacacs+ Configurations; Mschap Authentication - Cisco AP775A - Nexus Converged Network Switch 5010 Configuration Manual

MSCHAP Authentication

S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
To discard RADIUS or TACACS+ distribution using Fabric Manager, follow these steps:
Expand Switches > Security > AAA, and then select either RADIUS or TACACS+. You see either the
Step 1
RADIUS or TACACS+ configuration in the Information pane.
Click the CFS tab. You see either the RADIUS or TACACS+ CFS configuration.
Step 2
Choose abort from the Config Action drop-down list for each switch that should discard the pending
Step 3
RADIUS or TACACS+ distribution.
Click Apply Changes.
Step 4
.

Clearing Sessions

To clear a RADIUS or TACACS+ distribution using Fabric Manager, follow these steps:
Step 1 Expand Switches > Security > AAA and then select either RADIUS or TACACS+.
You see either the RADIUS or TACACS+ configuration in the Information pane.
Choose the CFS tab. You see either the RADIUS or TACACS+ CFS configuration.
Step 2
Choose clear from the Config Action drop-down list for each switch that should clear the pending
Step 3
RADIUS or TACACS+ distribution.
Click Apply Changes.
Step 4
.

Merge Guidelines for RADIUS and TACACS+ Configurations

The RADIUS and TACACS+ server and global configuration are merged when two fabrics merge. The
merged configuration is applied to CFS distribution-enabled switches.
When merging the fabric, be aware of the following conditions:
•
•
•
•
Caution If there is a conflict between two switches in the server ports configured, the merge fails.
MSCHAP Authentication
Microsoft Challenge Handshake Authentication Protocol (MSCHAP) is the Microsoft version of CHAP.
You can use MSCHAP for user logins to an MDS switch through a remote authentication server
(RADIUS or TACACS+).
Cisco MDS 9000 Family Fabric Manager Configuration Guide
41-24
The server groups are not merged.
The server and global keys are not changed during the merge.
The merged configuration contains all servers found on all CFS enabled switches.
The timeout and retransmit parameters of the merged configuration are the largest values found per
server and global configuration.
Chapter 41 Configuring RADIUS and TACACS+
OL-17256-03, Cisco MDS NX-OS Release 4.x