Cisco MDS SanOS Troubleshooting Guide -- Troubleshooting RADIUS and TACACS+ - Revision history

Pravraj: /* Troubleshooting RADIUS and TACACS With Cisco ACS */

2010-09-28T10:44:01Z

Troubleshooting RADIUS and TACACS With Cisco ACS

← Older revision		Revision as of 10:44, 28 September 2010
Line 607:		Line 607:
	----		----

-	4. e Cisco IOS/PIX RADIUS Attributes field is not present, follow these steps:	+	4. If the Cisco IOS/PIX RADIUS Attributes field is not present, follow these steps:

	: a. Choose<span style="font-style: normal">'''<font color="Black"> Interface > RADIUS (Cisco IOS/PIX).</font>'''</span>		: a. Choose<span style="font-style: normal">'''<font color="Black"> Interface > RADIUS (Cisco IOS/PIX).</font>'''</span>
Line 623:		Line 623:
	----		----

-	Refer to the <span style="font-weight: normal">''<font color="Black">User ~~guide~~ for Cisco Secure ACS</font>''</span> at the following website for more information:	+	Refer to the <span style="font-weight: normal">''<font color="Black">User Guide for Cisco Secure ACS</font>''</span> at the following website for more information:

	<span class="cXRef_Color" style="font-weight: normal">http://cisco.com/en/US/products/sw/secursw/ps2086/products_user_guide_list.html</span>		<span class="cXRef_Color" style="font-weight: normal">http://cisco.com/en/US/products/sw/secursw/ps2086/products_user_guide_list.html</span>

Pravraj: /* User Cannot Access Certain Features */

2010-09-28T10:43:09Z

User Cannot Access Certain Features

← Older revision		Revision as of 10:43, 28 September 2010
Line 557:		Line 557:

	{\| id="wp45059table45054" width="80%" border="1" cellpadding="3"		{\| id="wp45059table45054" width="80%" border="1" cellpadding="3"
-	\|+ Table 17-4 User Cannot Access Certain Features<span>'''''<font color="Black"> </font>'''''</span>	+	\|+ '''Table 17-4 User Cannot Access Certain Features'''<span>'''''<font color="Black"> </font>'''''</span>
	\|- align="left" valign="bottom"		\|- align="left" valign="bottom"
	! scope="col" \|		! scope="col" \|
Line 575:		Line 575:
	Cisco-AVPair = shell:roles="<span style="font-style: oblique; font-weight: normal"><font color="Black">rolename1 rolename2"</font></span>.		Cisco-AVPair = shell:roles="<span style="font-style: oblique; font-weight: normal"><font color="Black">rolename1 rolename2"</font></span>.

-	For TACACS , configure the attribute/value pair on the server for the role using:	+	For TACACS, configure the attribute/value pair on the server for the role using:

	roles="<span style="font-style: oblique; font-weight: normal"><font color="Black">rolename1 rolename2"</font></span><span style="font-style: normal; font-weight: normal"><font color="Black">.</font></span>		roles="<span style="font-style: oblique; font-weight: normal"><font color="Black">rolename1 rolename2"</font></span><span style="font-style: normal; font-weight: normal"><font color="Black">.</font></span>

Pravraj: /* User Is Not in Any Configured Role */

2010-09-28T10:42:14Z

User Is Not in Any Configured Role

← Older revision		Revision as of 10:42, 28 September 2010
Line 521:		Line 521:

	{\| id="wp45023table45018" width="80%" border="1" cellpadding="3"		{\| id="wp45023table45018" width="80%" border="1" cellpadding="3"
-	\|+ Table 17-3 User Is Not In Any Configured Role<span>'''''<font color="Black"> </font>'''''</span>	+	\|+ '''Table 17-3 User Is Not In Any Configured Role'''<span>'''''<font color="Black"> </font>'''''</span>
	\|- align="left" valign="bottom"		\|- align="left" valign="bottom"
	! scope="col" \|		! scope="col" \|

Pravraj: /* Verifying TACACS Server Groups Using Fabric Manager */

2010-09-28T10:41:55Z

Verifying TACACS Server Groups Using Fabric Manager

← Older revision		Revision as of 10:41, 28 September 2010
Line 486:		Line 486:
	3. Set the Server List field to a comma-separated list of TACACS servers.		3. Set the Server List field to a comma-separated list of TACACS servers.

-	4. Set the Deadtime field to configure the time that the switch waits before retesting a dead server. and click <span style="font-style: normal">'''<font color="Black">Apply</font>'''</span> to save these changes.	+	4. Set the Deadtime field to configure the time that the switch waits before retesting a dead server and click <span style="font-style: normal">'''<font color="Black">Apply</font>'''</span> to save these changes.

	----		----

Pravraj: /* Verifying RADIUS Server Groups Using Fabric Manager */

2010-09-28T10:41:38Z

Verifying RADIUS Server Groups Using Fabric Manager

← Older revision		Revision as of 10:41, 28 September 2010
Line 446:		Line 446:
	3. Set the Server List field to a comma-separated list of RADIUS servers.		3. Set the Server List field to a comma-separated list of RADIUS servers.

-	4. Set the Deadtime field to configure the time that the switch waits before retesting a dead server. and click <span style="font-style: normal">'''<font color="Black">Apply</font>'''</span> to save these changes.	+	4. Set the Deadtime field to configure the time that the switch waits before retesting a dead server and click <span style="font-style: normal">'''<font color="Black">Apply</font>'''</span> to save these changes.

	----		----

Pravraj: /* User Authentication Fails */

2010-09-28T10:41:23Z

User Authentication Fails

← Older revision		Revision as of 10:41, 28 September 2010
Line 386:		Line 386:

	{\| id="wp44397table44392" width="80%" border="1" cellpadding="3"		{\| id="wp44397table44392" width="80%" border="1" cellpadding="3"
-	\|+ Table 17-2 User Authentication Fails<span>'''''<font color="Black"> </font>'''''</span>	+	\|+ '''Table 17-2 User Authentication Fails'''<span>'''''<font color="Black"> </font>'''''</span>
	\|- align="left" valign="bottom"		\|- align="left" valign="bottom"
	! scope="col" \|		! scope="col" \|

Pravraj: /* Verifying TACACS Server Monitor Configuration Using Fabric Manager */

2010-09-28T10:41:03Z

Verifying TACACS Server Monitor Configuration Using Fabric Manager

← Older revision		Revision as of 10:41, 28 September 2010
Line 331:		Line 331:
	----		----

-	1. Choose <span style="font-style: normal">'''<font color="Black">Switches > Security > AAA > TACACS </font>'''</span>and ~~select~~ the <span style="font-style: normal">'''<font color="Black">Servers</font>'''</span> tab. You see the TACACS configuration in the Information panel.	+	1. Choose <span style="font-style: normal">'''<font color="Black">Switches > Security > AAA > TACACS </font>'''</span>and click the <span style="font-style: normal">'''<font color="Black">Servers</font>'''</span> tab. You see the TACACS configuration in the Information panel.

	2. Highlight the server that you need to change and click <span style="font-style: normal">'''<font color="Black">Delete Row</font>'''</span> to delete this server configuration.		2. Highlight the server that you need to change and click <span style="font-style: normal">'''<font color="Black">Delete Row</font>'''</span> to delete this server configuration.
Line 345:		Line 345:
	7. Set the TimeOut value and click <span style="font-style: normal">'''<font color="Black">Apply</font>'''</span> to save these changes.		7. Set the TimeOut value and click <span style="font-style: normal">'''<font color="Black">Apply</font>'''</span> to save these changes.

-	8. ~~Select~~ the <span style="font-style: normal">'''<font color="Black">CFS</font>'''</span> tab and select <span style="font-style: normal">'''<font color="Black">commit</font>'''</span> from the Config Action drop-down menu and click <span style="font-style: normal">'''<font color="Black">Apply Changes </font>'''</span>to distribute these changes to all switches in the fabric.	+	8. Click the <span style="font-style: normal">'''<font color="Black">CFS</font>'''</span> tab and select <span style="font-style: normal">'''<font color="Black">commit</font>'''</span> from the Config Action drop-down menu and click <span style="font-style: normal">'''<font color="Black">Apply Changes </font>'''</span>to distribute these changes to all switches in the fabric.

	9. Choose <span style="font-style: normal">'''<font color="Black">Switches > Security > AAA a</font>'''</span>nd click<span style="font-style: normal">'''<font color="Black"> Create Row</font>'''</span> to create a server group.		9. Choose <span style="font-style: normal">'''<font color="Black">Switches > Security > AAA a</font>'''</span>nd click<span style="font-style: normal">'''<font color="Black"> Create Row</font>'''</span> to create a server group.

Pravraj: /* Verifying RADIUS Server Monitor Configuration Using Fabric Manager */

2010-09-28T10:40:23Z

Verifying RADIUS Server Monitor Configuration Using Fabric Manager

← Older revision		Revision as of 10:40, 28 September 2010
Line 274:		Line 274:
	----		----

-	1. Choose <span style="font-style: normal">'''<font color="Black">Switches > Security > AAA > RADIUS </font>'''</span>and ~~select~~ the <span style="font-style: normal">'''<font color="Black">Servers</font>'''</span> tab. You see the RADIUS configuration in the Information panel.	+	1. Choose <span style="font-style: normal">'''<font color="Black">Switches > Security > AAA > RADIUS </font>'''</span>and click the <span style="font-style: normal">'''<font color="Black">Servers</font>'''</span> tab. You see the RADIUS configuration in the Information panel.

	2. Highlight the server that you need to change and click <span style="font-style: normal">'''<font color="Black">Delete Row</font>'''</span> to delete this server configuration.		2. Highlight the server that you need to change and click <span style="font-style: normal">'''<font color="Black">Delete Row</font>'''</span> to delete this server configuration.
Line 288:		Line 288:
	7. Set the TimeOut value and click <span style="font-style: normal">'''<font color="Black">Apply</font>'''</span> to save these changes.		7. Set the TimeOut value and click <span style="font-style: normal">'''<font color="Black">Apply</font>'''</span> to save these changes.

-	8. ~~Select~~ the <span style="font-style: normal">'''<font color="Black">CFS</font>'''</span> tab and select <span style="font-style: normal">'''<font color="Black">commit</font>'''</span> from the Config Action drop-down menu and click <span style="font-style: normal">'''<font color="Black">Apply Changes</font>'''</span> to distribute these changes to all switches in the fabric.	+	8. Click the <span style="font-style: normal">'''<font color="Black">CFS</font>'''</span> tab and select <span style="font-style: normal">'''<font color="Black">commit</font>'''</span> from the Config Action drop-down menu and click <span style="font-style: normal">'''<font color="Black">Apply Changes</font>'''</span> to distribute these changes to all switches in the fabric.

	9. Choose <span style="font-style: normal">'''<font color="Black">Switches > Security > AAA a</font>'''</span>nd click<span style="font-style: normal">'''<font color="Black"> Create Row</font>'''</span> to create a server group.		9. Choose <span style="font-style: normal">'''<font color="Black">Switches > Security > AAA a</font>'''</span>nd click<span style="font-style: normal">'''<font color="Black"> Create Row</font>'''</span> to create a server group.
Line 296:		Line 296:
	11. Set the Server List field to a comma-separated list of RADIUS servers.		11. Set the Server List field to a comma-separated list of RADIUS servers.

-	12. Set the Deadtime field to configure the time that the switch waits before retesting a dead server. and click <span style="font-style: normal">'''<font color="Black">Apply</font>'''</span> to save these changes.	+	12. Set the Deadtime field to configure the time that the switch waits before retesting a dead server and click <span style="font-style: normal">'''<font color="Black">Apply</font>'''</span> to save these changes.

	----		----

Pravraj: /* Verifying TACACS Configuration Using Fabric Manager */

2010-09-28T10:39:30Z

Verifying TACACS Configuration Using Fabric Manager

← Older revision		Revision as of 10:39, 28 September 2010
Line 220:		Line 220:
	----		----

-	1. Choose <span style="font-style: normal">'''<font color="Black">Switches > Security > AAA > TACACS </font>'''</span>and ~~select~~ the <span style="font-style: normal">'''<font color="Black">Servers</font>'''</span> tab. You see the TACACS configuration in the Information panel.	+	1. Choose <span style="font-style: normal">'''<font color="Black">Switches > Security > AAA > TACACS </font>'''</span>and click the <span style="font-style: normal">'''<font color="Black">Servers</font>'''</span> tab. You see the TACACS configuration in the Information panel.

	2. Highlight the server that you need to change and click <span style="font-style: normal">'''<font color="Black">Delete Row</font>'''</span> to delete this server configuration.		2. Highlight the server that you need to change and click <span style="font-style: normal">'''<font color="Black">Delete Row</font>'''</span> to delete this server configuration.
Line 232:		Line 232:
	6. Set the TimeOut value and click <span style="font-style: normal">'''<font color="Black">Apply</font>'''</span> to save these changes.		6. Set the TimeOut value and click <span style="font-style: normal">'''<font color="Black">Apply</font>'''</span> to save these changes.

-	7. ~~Select~~ the <span style="font-style: normal">'''<font color="Black">CFS</font>'''</span> tab and select <span style="font-style: normal">'''<font color="Black">commit</font>'''</span> from the Config Action drop-down menu and click <span style="font-style: normal">'''<font color="Black">Apply Changes</font>'''</span> to distribute these changes to all switches in the fabric.	+	7. Click the <span style="font-style: normal">'''<font color="Black">CFS</font>'''</span> tab and select <span style="font-style: normal">'''<font color="Black">commit</font>'''</span> from the Config Action drop-down menu and click <span style="font-style: normal">'''<font color="Black">Apply Changes</font>'''</span> to distribute these changes to all switches in the fabric.

	----		----

Pravraj: /* Verifying RADIUS Configuration Using Fabric Manager */

2010-09-28T10:38:59Z

Verifying RADIUS Configuration Using Fabric Manager

← Older revision		Revision as of 10:38, 28 September 2010
Line 172:		Line 172:
	6. Set the TimeOut value and click <span style="font-style: normal">'''<font color="Black">Apply</font>'''</span> to save these changes.		6. Set the TimeOut value and click <span style="font-style: normal">'''<font color="Black">Apply</font>'''</span> to save these changes.

-	7. ~~Select~~ the <span style="font-style: normal">'''<font color="Black">CFS</font>'''</span> tab and select <span style="font-style: normal">'''<font color="Black">commit</font>'''</span> from the Config Action drop-down menu and click <span style="font-style: normal">'''<font color="Black">Apply Changes</font>'''</span> to distribute these changes to all switches in the fabric.	+	7. Click the <span style="font-style: normal">'''<font color="Black">CFS</font>'''</span> tab and select <span style="font-style: normal">'''<font color="Black">commit</font>'''</span> from the Config Action drop-down menu and click <span style="font-style: normal">'''<font color="Black">Apply Changes</font>'''</span> to distribute these changes to all switches in the fabric.

	----		----