Reference Guide

You must specify the type of service as one of RADIUS, LDAP, or TACACS+. Local is used for local authentication if the user
authentication fails on the authentication server.
Example for enabling RADIUS
switch:admin> aaaconfig --authspec "radius;local" -backup
Example for enabling LDAP
switch:admin> aaaconfig --authspec "ldap;local" -backup
Example for enabling TACACS+
switch:admin> aaaconfig --authspec "tacacs+;local" -backup
Deleting an authentication server from the configuration
1. Connect to the switch and log in using an account with admin permissions.
2. Enter the aaaConfig --remove command.
When the command succeeds, the event log indicates that the server is removed.
Changing an authentication server configuration
1. Connect to the switch and log in using an account with admin permissions.
2. Enter the aaaConfig --change command.
Changing the order in which authentication servers are contacted for service
1. Connect to the switch and log in using an account with admin permissions.
2. Enter the aaaConfig --move command.
When the command succeeds, the event log indicates that a server configuration is changed.
Displaying the current authentication configuration
1. Connect to the switch and log in using an account with admin permissions.
2. Enter the aaaConfig --show command.
If a configuration exists, its parameters are displayed. If the RADIUS, LDAP, or TACACS+ service is not configured, only the
parameter heading line is displayed. Parameters include:
Position The order in which servers are contacted to provide service.
Server The server names or IPv4 or IPv6 addresses. IPv6 is not supported
when using PEAP authentication.
Port The server ports.
Secret The shared secrets.
Timeouts The length of time servers have to respond before the next server is
contacted.
Authentication The type of authentication being used on servers.
Managing User Accounts
Brocade Fabric OS Administration Guide, 8.0.1
53-1004111-02 183