SeanK-F_EaN
1 Copper

LDAP/TACACS Authentication on MDS

Hi,

I am looking to move away from using local accounts on our MDS switches as an auditing requirement

We use cli/DCNM/device manager/ECC/Prosphere. 

Has anyone implemented (LDAP)Active directory or Tacacs authentication successfully with the tools listed?

Thanks,

Sean

Labels (1)
0 Kudos
9 Replies
RRR
5 Tungsten

Re: LDAP/TACACS Authentication on MDS

Hi there,

we use CLI, DCNM, DM since years now and the LDAP integration just works fine. Is there anything specific you want to know?

Bhuppi1
1 Nickel

Re: LDAP/TACACS Authentication on MDS

Hi RRR,

Do you also use LDAP with ECC(Ionix 6.1.X).  If , yes,  please share the procedure.

Thank You.

0 Kudos
RRR
5 Tungsten

Re: LDAP/TACACS Authentication on MDS

I haven't seen ECC in over a year and for what I remember of that customer, they used locally created users, but it's been a while...

Allen Ward
4 Germanium

Re: LDAP/TACACS Authentication on MDS

We tied in AD authentication to ECC but I was never happy with how it worked. I wanted more flexibility to use AD groups. We took the instructions straight out of the install and planning guide, so we didn't do anything special.

I'm looking forward to seeing how SRM Suite 3.0 integrates for AD authentication sometime soon!

Bhuppi1
1 Nickel

Re: LDAP/TACACS Authentication on MDS

Hi,

I have configured a Cisco MDS 9000 switch(NX-OS 5.0.8a) for LDAP authentication and authorization following the Cisco doc. However, I am not able to login still successfully.   RADIUS login works fine.

Can you share the procedure for Cisco.

Do, we also need to set LDAP search map as well, or it will work without that step ?

Thanks

Sudhir

0 Kudos
pstasko
1 Copper

Re: LDAP/TACACS Authentication on MDS

Here is a guide that was used for NX-OS that was running on an MDS 9148 switch. http://lvlnrd.com/tacacs-net-server-cisco-ios-and-nx-os-nexus-mds-configurations-for-tacacs-aaa/

SKT2
3 Zinc

Re: LDAP/TACACS Authentication on MDS

Configure MDS LDAP - Cisco

this sounds a good one

SKT2
3 Zinc

Re: LDAP/TACACS Authentication on MDS

also look at the security configurtion guide for the respective NXOS version

healyj
2 Iron

Re: LDAP/TACACS Authentication on MDS

Hello Sean,

Did you the correct info in order to implement non local authentication.

Thanks and rgds,

Jim.

0 Kudos