5-17
Catalyst 3550 Multilayer Switch Software Configuration Guide
78-11194-03
Chapter5 Clustering Switches Planning a Switch Cluster
TACACS+
If Terminal Access Controller Access Control System Plus (TACACS+) is configured on the command
switch, TACACS+ must also be configured on all member switches to access the switch cluster from
CMS. For more information about TACACS+, see the “Controlling Switch Access with TACACS+”
section on page 6-10.
Access Modes in CMS
CMS provides two levels of access to the configuration options: read-write access and read-only access.
Privilege levels 0 to 15 are supported.
Privilege level 15 provides you with read-write access to CMS.
Privilege levels 1 to 14 provide you with read-only access to CMS. Any options in the CMS
windows, menu bar, toolbar, and popup menus that change the switch or cluster configuration are
not shown in read-only mode.
Privilege level0 denies access to CMS.
For more information about CMS access modes, see the “Access Modes in CMS” section on page3-31.
Note If your cluster has these member switches running earlier software releases and if you have
read-only access to these member switches, some configuration windows for those switches
display incomplete information:
Catalyst 2900 XL or Catalyst 3500 XL member switches running Cisco IOS
Release 12.0(5)WC2 or earlier
Catalyst 2950 member switches running Cisco IOS Release 12.0(5)WC2 or earlier
Catalyst 3550 member switches running Cisco IOS Release 12.1(6)EA1 or earlier
For more information about this limitation, refer to the Catalyst3550 release notes.
These switches do not support read-only mode on CMS:
Catalyst 1900 and Catalyst 2820
Catalyst 2900 XL switches with 4-MB CPU DRAM
In read-only mode, these switches appear as unavailable dev ice s a nd c an not be c onf igur ed from
CMS.
LRE Profiles
A configuration conflict occurs if a switch cluster has LRE swit che s us ing b oth priv ate and pu blic
profiles. If one LRE switch in a cluster is assigned a public profile, all LRE switches in that cluster must
have that same public profile. Before you add an LRE switc h to a clust er, make su re th at y ou assig n i t
the same public profile used by other LRE switches in the cluster.
A cluster can have a mix of LRE switches using different private profiles.
For more information about the Catalyst2900 LRE XL switches and LRE technology, refer to the
Catalyst 2900 XL and Catalyst 3500 XL documentation for Cisco IOS Release 12.0(5)WC2.