Administrator Guide

170 Fabric OS Administrator’s Guide
53-1002920-02
Remote authentication
6
--authspec “radius;local” Authenticates management connections
against any RADIUS databases first.
If RADIUS fails for any reason, authenticates
against the local user database.
not
supported
not
supported
--authspec “radius;local” --backup Authenticates management connections
against any RADIUS databases. If RADIUS fails
because the service is not available, it then
authenticates against the local user database.
The --backup option directs the service to try
the secondary authentication database only if
the primary authentication database is not
available.
On On
--authspec “ldap” Authenticates management connections
against any LDAP databases only. If LDAP
service is not available or the credentials do
not match, the login fails.
n/a n/a
--authspec “ldap; local” Authenticates management connections
against any LDAP databases first. If LDAP fails
for any reason, it then authenticates against
the local user database.
n/a On
--authspec “ldap; local” --backup Authenticates management connections
against any LDAP databases first. If LDAP fails
for any reason, it then authenticates against
the local user database. The --backup option
states to try the secondary authentication
database only if the primary authentication
database is not available.
n/a On
--authspec “tacacs+” Authenticates management connections
against any TACACS+ databases only. If
TACACS+ service is not available or the
credentials do not match, the login fails.
not
supported
not
supported
--authspec “tacacs+; local” Authenticates management connections
against any TACACS+ databases first. If
TACACS+ fails for any reason, it then
authenticates against the local user database.
not
supported
not
supported
--authspec “tacacs+; local” --backup Authenticates management connections
against any TACACS+ databases first. If
TACACS+ fails for any reason, it then
authenticates against the local user database.
The --backup option states to try the secondary
authentication database only if the primary
authentication database is not available.
not
supported
not
supported
--authspec -nologout Prevents users from being logged out when you
change authentication. Default behavior is to
log out users when you change authentication.
n/a n/a
1. Fabric OS v5.1.0 and earlier aaaConfig --switchdb <on | off> setting.
TABLE 22 Authentication configuration options (Continued)
aaaConfig options Description Equivalent setting in
Fabric OS v5.1.0 and
earlier
--radius --switchdb
1