Deployment Guide

Command options
The following table outlines the aaaConfig command options used to set the authentication mode.
Authentication configuration optionsTABLE 24
aaaConfig options Description
--authspec "local" Default setting. Authenticates management connections
against the local database only.
If the password does not match or the user is not
defined, the login fails.
--authspec "radius" Authenticates management connections against any
RADIUS databases only.
If the RADIUS service is not available or the credentials
do not match, the login fails.
--authspec "radius;local" Authenticates management connections against any
RADIUS databases first.
If RADIUS fails for any reason , authenticates against
the local user database.
--authspec "radius;local" --backup Authenticates management connections against any
RADIUS databases. If RADIUS fails because the
service is not available, it then authenticates against the
local user database. The --backup option directs the
service to try the secondary authentication database
only if the primary authentication database is not
available.
--authspec "ldap" Authenticates management connections against any
LDAP databases only. If LDAP service is not available
or the credentials do not match, the login fails.
--authspec "ldap; local" Authenticates management connections against any
LDAP databases first. If LDAP fails for any reason, it
then authenticates against the local user database.
--authspec "ldap; local" -- backup Authenticates management connections against any
LDAP databases first. If LDAP fails for any reason, it
then authenticates against the local user database. The
--backup option states to try the secondary
authentication database only if the primary
authentication database is not available.
--authspec "tacacs+" Authenticates management connections against any
TACACS+ databases only. If TACACS+ service is not
available or the credentials do not match, the login fails.
--authspec "tacacs+; local" Authenticates management connections against any
TACACS+ databases first. If TACACS+ fails for any
reason, it then authenticates against the local user
database.
Command options
150 Fabric OS Administrators Guide
53-1003130-01