Administrators Guide (Supporting Fabric OS v7.3.0) User Manual

When the command succeeds, the event log indicates that a server configuration is changed.
Displaying the current authentication configuration
1. Connect to the switch and log in using an account with admin permissions.
2. Enter the aaaConfig --show command.
If a configuration exists, its parameters are displayed. If the RADIUS, LDAP, or TACACS+ service is
not configured, only the parameter heading line is displayed. Parameters include:
Position The order in which servers are contacted to provide service.
Server The server names or IPv4 or IPv6 addresses. IPv6 is not supported when using PEAP
authentication.
Port The server ports.
Secret The shared secrets.
Timeouts The length of time servers have to respond before the next server is contacted.
Authentication The type of authentication being used on servers.
Configuring local authentication as backup
It is useful to enable local authentication, so that the switch can take over authentication locally if the
RADIUS or LDAP servers fail to respond because of power outage or network problems.
1. Connect to the switch and log in using an account with admin permissions.
2. Enter the aaaConfig --authspec command to enable or disable RADIUS, LDAP, or TACACS+ with
local authentication as a backup authentication mechanism.
You must specify the type of service as one of RADIUS, LDAP, or TACACS+. Local is used for local
authentication if the user authentication fails on the authentication server.of enabling local
authentication as a backup for RADIUS.
switch:admin> aaaconfig --authspec "radius;local" -backup
Example for LDAP
switch:admin> aaaconfig --authspec "ldap;local" -backup
Example for TACACS+
switch:admin> aaaconfig --authspec "tacacs+;local" -backup
For details about the aaaConfig command refer toCommand options on page 150.
When local authentication is enabled and the authentication servers fail to respond, you can log in to
the default switch accounts (admin and user) or any user-defined account. You must know the
passwords of these accounts.
When the aaaConfig command succeeds, the event log indicates that local database authentication
is disabled or enabled.
Displaying the current authentication configuration
Fabric OS Administrators Guide 171
53-1003130-01