HP Cisco MDS 9140 Cisco MDS 9000 Family Fabric Manager Configuration Guide - R - Page 857

Chapter 41 Configuring RADIUS and TACACS+ Configuring RADIUS Server Monitoring Parameters Send documentation comments to [email protected] Figure 41-2 Switch Authorization and Authentication Flow Start IInnccoommiinngg aacccceessss request to sswwiittcchh Local Remote First or next server lookup No more servers left Found a RADIUS server Local database lookup Success Failure Access permitted RADIUS Lookup No response Accept Access permitted Denied access 105229 Note No more server groups left = no response from any server in all server groups. No more servers left = no response from any server within this server group. Configuring RADIUS Server Monitoring Parameters Cisco MDS 9000 Family switches can use the RADIUS protocol to communicate with remote AAA servers. You can configure multiple RADIUS servers and server groups and set timeout and retry counts. RADIUS is a distributed client/server protocol that secures networks against unauthorized access. In the Cisco implementation, RADIUS clients run on Cisco MDS 9000 Family switches and send authentication requests to a central RADIUS server that contains all user authentication and network service access information. This section defines the RADIUS operation, identifies its network environments, and describes its configuration possibilities. OL-17256-03, Cisco MDS NX-OS Release 4.x Cisco MDS 9000 Family Fabric Manager Configuration Guide 41-7