HP StorageWorks Fabric OS 5.3.x administrator guide (5697-0244, November 2009)

Fabric OS 5.3.0 administrator guide 83
How to change a RADIUS server configuration
1. Connect to the switch and log in as admin.
2. Enter this command:
NOTE: Protected Extensible Authentication Protocol (PEAP) is an authentication protocol used to
authenticate users and clients. It is based on Extensible Authentication Protocol (EAP) and Transport Layer
Security (TLS).
When PEAP is configured on the switch, clients running Fabric Manager cannot authenticate.
How to change the order in which RADIUS servers are contacted for service
1. Connect to the switch and log in as admin.
2. Enter this command:
When the command succeeds, the event log indicates that a server configuration is changed.
Enabling and disabling local authentication as backup
It is useful to enable local authentication so that the switch can take over authentication locally if the
RADIUS servers fail to respond because of power outage or network problems. To enable or disable local
authentication, enter the appropriate command:
For details about this command and how it is different from aaaConfig –radiuslocal, see Table 12
on page 65.
When local authentication is enabled and RADIUS servers fail to respond, you can log in to the default
switch accounts (admin and user) or any user-defined account. You must know the passwords of these
accounts.
When the command succeeds, the event log indicates that local database authentication is disabled or
enabled.
switch:admin> aaaConfig --change server [-p port ] [-s secret ] [-t timeout ] [-a pap
| chap]
server Servers are listed by either name or IP address. Enter either the name or IP
address of the server to be changed.
-p port Optionally, enter a server port.
-s secret Optionally, enter a shared secret.
-t timeout Optionally, enter the length of time (in seconds) the server has to respond
before the next server is contacted.
-a[pap|chap]p
eap-mschapv2
Specify PAP, CHAP or PEAP as authentication protocol. Use
peap-mschapv2 to provide encrypted authentication channel between
switch and server.
switch:admin> aaaConfig --move server to_position
server Servers are listed by either name or IP address. Enter either the name or IP
address of the server whose position is to be changed.
to_positio
n
Enter the position number to which the server is to be moved.
switch:admin> aaaConfig –radiuslocalbackup