Fabric OS Administrator's Guide v7.0.0 (53-1002148-02, June 2011)

Fabric OS Administrator’s Guide 115
53-1002148-02
The authentication model using RADIUS and LDAP
5
Adding a RADIUS or LDAP server to the switch configuration
1. Connect to the switch and log in using an account with admin permissions.
2. Enter the aaaConfig
--add command.
At least one RADIUS or LDAP server must be configured before you can enable the RADIUS or LDAP
service.
If no RADIUS or LDAP configuration exists, turning on the RADIUS authentication mode triggers an
error message. When the command succeeds, the event log indicates that the configuration is
enabled or disabled.
Enabling and disabling a RADIUS or LDAP server
1. Connect to the switch and log in using an account with admin permissions.
2. Enter the aaaConfig
--authspec command to enable RADIUS or LDAP using the local
database.
You must specify the type of server as either RADIUS or LDAP, but not both. Local is used for
local authentication if the user authentication fails on the RADIUS or LDAP server.
Example of enabling RADIUS
switch:admin> aaaconfig --authspec "radius;local" --backup
Deleting a RADIUS or LDAP server from the configuration
1. Connect to the switch and log in using an account with admin permissions.
2. Enter the aaaConfig
--remove command.
When the command succeeds, the event log indicates that the server is removed.
Changing a RADIUS or LDAP server configuration
1. Connect to the switch and log in using an account with admin permissions.
2. Enter the aaaConfig
--change command.
Changing the order in which RADIUS or LDAP servers are contacted for service
1. Connect to the switch and log in using an account with admin permissions.
2. Enter the aaaConfig
--move command.
When the command succeeds, the event log indicates that a server configuration is changed.