S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
17-5
Cisco MDS 9000 Family Troubleshooting Guide, Release 3.x
OL-9285-05
Chapter 17 Troubleshooting RADIUS and
AAA Issues
Verifying Configuration Using Fabric Manager
To verify or change the configuration using Fabric Manager, follow these steps:
Step 1
Choose
Switches > Security > AAA >
and select the
Servers
tab. You see the
configuration in the Information panel.
Step 2
Highlight the server that you need to change and click
Delete Row
to delete this server configuration.
Step 3
Click
Create Row
to add a new server.
Step 4
Set the KeyType and Key fields to the preshared key configured on the server.
Step 5
Set the AuthPort and AcctPort fields to the authentication and accounting ports configured on the
server.
Step 6
Set the TimeOut value and click
Apply
to save these changes.
Step 7
Select the
CFS
tab and select
commit
from the Config Action drop-down menu and click
Apply
Changes
to distribute these changes to all switches in the fabric.
Verifying Configuration Using the CLI
To verify or change the configuration using the CLI, follow these steps:
Step 1
Use the
show
tacacs-server
command to display configured parameters.
switch#
show tacacs-server
Global shared secret:
***********
timeout value:
30
total number of servers:3
following servers are configured:
11.5.4.3:
available on port
:2
cisco.com:
available on port:49
11.6.5.4:
available on port:49
shared secret:*****
Step 2
Use the
tacacs-server host
ip-address
key
command to
set the preshared key to match what is
configured on your server.
Step 3
Use the
tacacs-server host
ip-address
port
command to
set the communications port to match what is
configured on your server.
Step 4
Use the
tacacs-server timeout
command to
set the
period in seconds for the switch to wait for a response
from all servers before the switch declares a timeout failure.
Step 5
Use the
tacacs commit
command to commit any changes and distribute to all switches in the fabric.
