Brocade MLX Series and Brocade NetIron XMR Diagnostic Guide ...

TACACS and TACACAS+ 9TACACS and TACACAS+• If you do not enable Telnet access, you can access the CLI using a serial connection to themanagement module. If you do not enable SNMP access, you will not be able to use BrocadeNetwork Advisor or third-party SNMP management applications.• You cannot authenticate Simple Network Management Protocol (SNMP) access to a Brocadedevice using TACACS or TACACS+.• Brocade devices do not support RADIUS security for SNMP access.• The TACACS or TACACS+, RADIUS, and Telnet login password authentication methods are notsupported for SNMP access.• For CLI access, you must configure authentication-method lists if you want the device toauthenticate access using local user accounts or a RADIUS server. Otherwise, the device willauthenticate using only the locally based password for the Super User privilege level.• When no authentication-method list is configured specifically for Web management access,the device performs authentication using the SNMP community strings:- For read-only access, use the user name “get” and the password “public”. The defaultread-only community string is “public”.- There is no default read-write community string, which means you cannot open aread-write management session using the Web management interface. You first mustconfigure a read-write community string using the CLI. Then you can log on using “set” asthe user name and the read-write community string you configure as the password.• If you configure an authentication-method list for Web management access and specify “local”as the primary authentication method, users who attempt to access the device using the Webmanagement interface must supply a user name and password configured in one of the localuser accounts on the device. You cannot access the device by entering “set” or “get” and thecorresponding SNMP community string.• For devices that can be managed using Brocade Network Advisor, the default authenticationmethod (if no authentication-method list is configured for SNMP) is the CLI Super User levelpassword. If no Super User level password is configured, then access through BrocadeNetwork Advisor is not authenticated. To use local user accounts to authenticate accessthrough Brocade Network Advisor, configure an authentication-method list for SNMP accessand specify “local” as the primary authentication method.TACACS+ is an enhancement to the TACACS security protocol. TACACS+ improves on TACACS byseparating the functions of authentication, authorization, and accounting (AAA) and by encryptingall the traffic between the Brocade device and the TACACS+ server.TACACS show commandsThis section describes the show commands that display information about the TACACS servers.show aaaSyntax: show aaaThis command displays information about all the TACACS+ and RADIUS servers identified on thedevice.Brocade MLX Series and Brocade NetIron XMR Diagnostic Guide 31753-1002426-02