Could you explain me in detail....

Thanks

M

AAA (TACACS+) is only referenced for Command Lin e Interactive Users, FC-SP, and ISCSI users. (I may have missed one, if so please point it out)

snmp-server users are configured locally (local username and password on the MDS).

Here is the confusing part. The MDS can automatically generate snmp-server user names and passwords that allow snmp access.

I recommend configuring a separate snmp-server user for the your FMS.

Here are the docs for creating a snmp-server user

http://www.cisco.com/univercd/cc/td/doc/product/sn5000/mds9000/2_0/cliguide/part5/snmp.htm#wp1232970

One thing to keep a heads up on.. is that you need to specify your role when you do this.

the built-in role for full access is network-admin.

thanks Colin for your time.

But AAA (tacacs+) uses Windows AD here. So, whenever a CLI user is created , automatically MDS creates an SNMP user (which I think is temporary) or vice versa. When it is automatically created, why do i need to create one more...would it not amount to duplication

Or are they temporary ?

Do you mean to say "create permanent users' using snmp-server command.

If that is going to be the case,then how the passwords will be synchronised between CLI users (AD users via TACACS+) and SNMP users...i know some automatic synchronization happen implicitly.

Also, I read the following Note from Cisco MDS config guide 3.0

-----

For an SNMPv3 operation using the external AAA server, user configurations in the external AAA server require AES to be the

privacy protocol to use SNMP PDU encryption.

-------

--Thanks

Mohan