AAA on switches with multiple management modules

Consider the following when working with local authentication, authorization, and accounting (AAA) on switchers with multiple management modules:
  • Local authentication:

    • The user database is synchronized between the Active and Standby management modules.

    • Only local users belonging to the administrators group and using local password authentication are permitted to log in to the Standby management module. Alternatively, the Standby management module can be accessed from the Active management module by providing a logged in admin user password.

  • Local authorization:

    • A few nonconfiguration commands are available on the Standby management module.

    • For expert users, the bash shell is available on the Standby management module.

  • Local accounting:

    • The audit logs used for local accounting are available only on the Active Management Module.