Brocade Fabric OS Command Reference Guide v6.1.0 (53-1000599-02, June 2008)

Fabric OS Command Reference 7
53-1000599-02
aaaConfig
2
Valid protocols are one of the following:
pap Password Authentication Protocol
chap Challenge-Handshake Authentication Protocol
peap-mschapv2
Protected Extensible Authentication Protocol (requires Fabric OS
v5.3.0 or later)
The distinction between protocols is only applicable to the packets between a
system and the RADIUS server. Between the user and system, passwords are
always used.
--remove server Removes the specified server from the configuration. The server must match
one of the IP addresses or the names shown in the current configuration.
The following operand is required:
-conf radius|ldap
Specifies the server configuration as either RADIUS or LDAP. If the server is
enabled, the command does not allow the last server to be removed from the
configuration list. RADIUS or LDAP must first be disabled before the last
server of the specified type may be removed.
--move server option
Moves the specified server from the current position in a RADIUS/LDAP
configuration list to the specified position. If the specified position is the
same as the current position, no change takes place. Valid options are:
-conf radius|ldap
Specifies the server configuration as either RADIUS or LDAP. This operand is
required.
to_position Specifies the new position for the server. The value for to_position is an
integer, and must be within the range of server positions in the current
configuration. Use the --show option to determine current server
positions.
--authspec “aaa1[;aaa2” [-backup]
Replace the configuration with the specified AAA service. Each service can be
specified only once in the list i.e. 'radius; local; radius' is invalid. No edit
option is provided. The authspec option takes as an argument a semi-colon
separated list of AAA services. Services must be enclosed in double quotation
marks.
The following AAA services and service pairs are valid:
“local” Default setting. Authenticates the user against the local database only. If the
password does not match or the user is not defined, the login fails.
“radius” When RADIUS is specified, the first RADIUS server is contacted. If the RADIUS
server is not reachable, then the next RADIUS server is contacted. If the
authentication fails, the authentication process does not check for the next
server in the sequence.