Brocade Fabric OS Command Reference Guide v6.1.0 (53-1000599-02, June 2008)

8 Fabric OS Command Reference
53-1000599-02
aaaConfig
2
“ldap” When ldap is specified, the first ADir server is contacted. If the ADir server is
not reachable, the next ADir server is contacted. If the authentication fails,
the authentication process does not check for the next server in the
sequence.
“radius;local” Enables the current RADIUS configuration as the primary AAA service and the
switch-local database as the secondary AAA service. When “radius” and
“local” are specified, if the RADIUS servers are reachable and the user
credentials are correct, the user authentication succeeds. If the user provides
credentials from the switch database, RADIUS authentication would fail but
login would still succeed through the switch database.
“ldap;local” Enables the current LDAP configuration as the primary AAA service and the
switch-local database as the secondary AAA service. When “ldap” and “local”
are specified, if the ADir servers are reachable and the user credentials are
correct, the user authentication succeeds. If the user provides credentials
from the switch database, ADir authentication would fail but login would still
succeed through the switch database.
-backup For use with "radius;local" and the "ldap;local" options only.The backup option
states to try the secondary AAA service only if none of the primary AAA
services are available.
--help Displays command usage.
Examples To display the current RADIUS configuration: --
switch:admin> aaaconfig --show
RADIUS CONFIGURATIONS
=====================
Position Server Port Secret Timeout(s) Auth-Protocol
1 192.168.233.48 1812 sharedsecret 3 CHAP
2 192.168.233.44 1812 sharedsecret 3 CHAP
3 radserver 1812 private 5 CHAP
Primary AAA Service: Switch database
Secondary AAA Service: None
LDAP CONFIGURATIONS
===================
LDAP configuration does not exist.
To move the RADIUS server "radserver" from position 3 to position 1:
switch:admin> aaaconfig --move radserver -conf radius 1
To change the configuration for RADIUS server 192.168.233.48:
switch:admin> aaaconfig --change 192.168.233.48 -conf ldap -p 3002 -s newsecret -t 1
To replace the AAA service with backup option:
switch:admin> aaaconfig --authspec “ldap;local” -backup
See Also none