HP StorageWorks Fabric OS 6.1.1 administrator guide (5697-0235, December 2009)

Fabric OS 6.1.1 administrator guide 81
To add a RADIUS server to the switch configuration:
1. Connect to the switch and log in using an admin account.
2. Issue the following command:
switch:admin> aaaConfig --add <server> [-p port] [-s secret] [-t timeout]
[-a pap | chap | peap-mschapv2]
where:
To add an LDAP server to the switch configuration:
1. Connect to the switch and log in using an admin account.
2. Issue the following command:
switch:admin> aaaConfig --add <server> [-p port] [-t timeout] [-d
domain_name]
At least one RADIUS or LDAP server must be configured before you can enable the RADIUS or LDAP
service.
Secret The shared secrets.
Timeouts The length of time servers have to respond before the next server is
contacted.
Authentication The type of authentication being used on servers.
server Enter either a server name or IPv4 or IPv6 address. Avoid
duplicating server listings (that is, listing the same server once by
name and again by IP address). Up to five servers can be added
to the configuration.
-p port Optional: Enter a server port. The default is port 1812.
-s secret Optional: Enter a shared secret. The default is sharedsecret.
Secrets can be from 8 to 40 alphanumeric characters long. Make
sure that the secret matches that configured on the server.
-t timeout Optional: Enter the length of time (in seconds) that the server has
to respond before the next server is contacted. The default is three
seconds. Time-out values can range from 1 to 30 seconds.
-a
[pap|chap|peap-msc
hapv2]
Specify PAP, CHAP or PEAP as authentication protocol. Use
peap-mschapv2 to provide encrypted authentication channel
between the switch and server.
server Enter either a server name or IPv4 address. Microsoft’s Active
Directory does not support IPv6 addresses. Avoid duplicating
server listings (that is, listing the same server once by name and
again by IP address). Up to five servers can be added to the
configuration.
-p port Optional: Enter a server port. The default is port 389.
-t timeout Optional: Enter the length of time (in seconds) that the server has
to respond before the next server is contacted. The default is three
seconds. Time-out values can range from 1 to 30 seconds.
-d domain_name Enter the name of the Windows domain.