HP Cisco Nexus 5000 Cisco MDS 9000 Family CLI Configuration Guide - Release 4. - Page 818

Switch AAA Functionalities Chapter 34 Configuring RADIUS and TACACS+ Send documentation comments to [email protected] CLI Security Options You can access the CLI using the console (serial connection), Telnet, or Secure Shell (SSH). For each management path (console, Telnet, and SSH), you can configure one or more of the following security control options: local, remote (RADIUS or TACACS+), or none. • Remote security control - Using RADIUS.See the"Configuring RADIUS" section on page 34-8. - Using TACACS+. See the"Configuring TACACS+" section on page 34-17. • Local security control. See the "Local AAA Services" section on page 34-35. These security features can also be configured for the following scenarios: • iSCSI authentication (see the ). • Fibre Channel Security Protocol (FC-SP) authentication (see Chapter 38, "Configuring FC-SP and DHCHAP") SNMP Security Options The SNMP agent supports security features for SNMPv1, SNMPv2c, and SNMPv3. Normal SNMP security features apply to all applications that use SNMP (for example, Cisco MDS 9000 Fabric Manager). SNMP security options also apply to Fabric Manager and Device Manager. See Chapter 33, "Configuring SNMP". Refer to the Cisco MDS 9000 Family Fabric Manager Configuration Guide for information on Fabric Manager and Device Manager. Switch AAA Functionalities Using the CLI or an SNMP application, you can configure AAA switch functionalities on any switch in the Cisco MDS 9000 Family. This section includes the following topics: • Authentication, page 34-3 • Authorization, page 34-3 • Accounting, page 34-3 • Remote AAA Services, page 34-4 • Remote Authentication Guidelines, page 34-4 • Server Groups, page 34-4 • AAA Service Configuration Options, page 34-4 • Authentication and Authorization Process, page 34-6 34-2 Cisco MDS 9000 Family CLI Configuration Guide OL-18084-01, Cisco MDS NX-OS Release 4.x