HP Cisco MDS 9124 Cisco MDS 9000 Family Fabric Manager Configuration Guide - R - Page 852

Switch AAA Chapter 41 Configuring RADIUS and TACACS+ Send documentation comments to [email protected] Fabric Manager Security Options You can access Fabric Manager using the console (serial connection), Telnet, or Secure Shell (SSH). For each management path (console, Telnet, and SSH), you can configure one or more of the following security control options: local, remote (RADIUS or TACACS+), or none. • Remote security control - Using RADIUS. See the "Configuring RADIUS Server Monitoring Parameters" section on page 41-7. - Using TACACS+. See the "Configuring TACACS+ Server Monitoring Parameters" section on page 41-14. • Local security control. See the "Local AAA Services" section on page 41-26. These security features can also be configured for the following scenarios: • iSCSI authentication (see the "iSCSI Authentication Setup Guidelines and Scenarios" section on page 50-56). • Fibre Channel Security Protocol (FC-SP) authentication (see Chapter 45, "Configuring FC-SP and DHCHAP") SNMP Security Options The SNMP agent supports security features for SNMPv1, SNMPv2c, and SNMPv3. Normal SNMP security features apply to all applications that use SNMP (for example, Cisco MDS 9000 Fabric Manager). SNMP security options also apply to the Fabric Manager and Device Manager. See Chapter 40, "Configuring SNMP". Switch AAA Using the CLI or Fabric Manager, you can configure AAA switch functionalities on any switch in the Cisco MDS 9000 Family. This section includes the following topics: • Authentication, page 41-3 • Authorization, page 41-3 • Accounting, page 41-3 • Remote AAA Services, page 41-4 • Remote Authentication Guidelines, page 41-4 • Server Groups, page 41-4 • AAA Configuration Options, page 41-4 • Authentication and Authorization Process, page 41-6 41-2 Cisco MDS 9000 Family Fabric Manager Configuration Guide OL-17256-03, Cisco MDS NX-OS Release 4.x