> # Configuring Security Features on an External AAA Server

> The authentication, authorization, and accounting (AAA) feature verifies the identity of, grants access to, and tracks the actions of users managing a switch. All Cisco MDS 9000 Family switches use Remote Access Dial-In User Service (RADIUS) or Terminal Access Controller Access Control device Plus (TACACS+) protocols to provide solutions using remote AAA servers.

> Based on the user ID and password combination provided, switches perform local authentication or authorization using the local database or remote authentication or authorization using a AAA server. A preshared secret key provides security for communication between the switch and AAA servers. This secret key can be configured for all AAA servers or for only a specific AAA server. This security feature provides a central management capability for AAA servers.

> This chapter includes the following topics:

> - Information About Switch Management Security
> - Guidelines and Limitations
> - Default Settings
> - Configuring the RADIUS, TACACS+, and LDAP Server
> - Verifying RADIUS and TACACS+ Configuration
> - Feature History for RADIUS, TACACS+, and LDAP

> Copyright 2010-2013, Cisco Systems, Inc. All rights reserved.