HP StorageWorks Enterprise File Services WAN Accelerator 2.1.7 Command-Line Interface Reference Manual (392361-004, June 2006)

72 4 - CONFIGURATION-MODE COMMANDS
aaa authentication login default
Description Configures Remote Authentication Dial-In User Service (RADIUS) or Terminal
Access Controller Access Control System (TACACS+) login settings. The order in
which the methods are specified is the order in which the authentication is attempted.
The no aaa command option clears all authentication states and returns user
authentication to the local username database.
Syntax aaa authentication login default <method>
Parameters
Example
minna (config) # aaa authentication login default radius tacacs+
minna (config) #
aaa authorization map default-user
Description Sets the local user default mapping for RADIUS or TACACS+ server authentication.
When a user is authenticated (through RADIUS or TACACS+) and does not have a
local account, this command specifies what local account the authenticated user will
be logged in as. If the user name is local, this mapping is ignored. This mapping
depends on the setting of the aaa authorization map order command. The no
command option disables user default mapping.
Syntax aaa authorization map default-user <user_name>
Parameters
Example
minna (config) # aaa authorization map default-user admin
minna (config) #
aaa authorization map order
Description Sets the order for remote to local user mappings for RADIUS or TACACS+ server
authentication. The no command option disables authentication.
Syntax aaa authentication map order <policy>
Parameters
<method> Specifies the authentication method: radius, tacacs+, or local. Use a space
separated list.
<user_name> Specifies the user name for RADIUS or TACACS+ authentication: admin
or monitor.
<policy> Specifies the order in which to apply the authentication policy: remote-only,
remote-first, local-only.