Connectivity Guide

values for Dell-group-name are sysadmin, secadmin, netadmin, and netoperator. Use the VSA Dell-group-name values when you
create users on a Radius or TACACS+ server.
For detailed information about how to congure vendor-specic attributes on a RADIUS or TACACS+ server, refer to the respective
RADIUS or TACACS+ server documentation.
Congure AAA authentication
OS10(config)# aaa authentication login default group radius local
OS10(config)# do show running-configuration aaa
aaa authentication login default group radius local
aaa authentication login console local
Remove AAA authentication methods
OS10(config)# no aaa authentication login default
OS10(config)# do show running-configuration aaa
aaa authentication login default local
aaa authentication login console local
User re-authentication
To prevent users from accessing resources and performing tasks for which they are not authorized, OS10 allows you to require users to re-
authenticate by logging in again when an authentication method or server changes, such as:
• Adding or removing a RADIUS server using the radius-server host command
• Adding or removing an authentication method using the aaa authentication login {console | default} {local |
group radius | group tacacs+}
command
You can enable this feature so that user re-authentication is required when any of these actions are performed. In these cases, logged-in
users are logged out of the switch and all OS10 sessions terminate. By default, user re-authentication is disabled.
Enable user re-authentication
• Enable user re-authentication in CONFIGURATION mode.
aaa re-authenticate enable
The no version of this command disables user re-authentication.
Password strength
By default, the password you congure with the username password command must be at least nine alphanumeric characters.
To increase password strength, you can create password rules using the password-attributes command. When you enter the
command, at least one parameter is required. When you enter the character-restriction parameter, at least one option is required.
• Create rules for stronger passwords in CONFIGURATION mode.
password-attributes {[min-length number] [character-restriction {[upper number]
[lower number][numeric number] [special-char number]}}
– min-length number — Enter the minimum number of required alphanumeric characters, from 6 to 32; default 9.
– character-restriction — Enter a requirement for the alphanumeric characters in a password:
◦ upper number — Minimum number of uppercase characters required, from 0 to 31; default 0.
◦ lower number — Minimum number of lowercase characters required, from 0 to 31; default 0.
◦ numeric number — Minimum number of numeric characters required, from 0 to 31; default 0.
◦ special-char number — Minimum number of special characters required, from 0 to 31; default 0.
614
System management