Owner manual

192 HP VMA SAN Gateway User’s Guide AM456-9026A
List Statically-Configured ARP Entries
show arp static
Display a list of all statically-configured ARP entries.
Security Commands
This section covers the following commands:
• Authentication Method and Order on page 192
• RADIUS Configuration on page 193
• TACACS+ Configuration on page 194
• SSH Configuration on page 195
• Banner Commands on page 198
Authentication Method and Order
aaa authentication login default <list of authentication methods> ...
no aaa authentication login
Sets the list of acceptable authentication methods for system logins. local, radius, and tacacs+
are acceptable methods. The order in which the methods are specified is the order in which the
authentication is attempted.
aaa authorization map default-user <user name>
no aaa authorization map default-user
When a user is authenticated (via RADIUS or TACACS+) and does not have a local account, this
command specifies what local account the authenticated user will be logged on as. If the user name
is local, this mapping is ignored. This mapping is used depending on the setting of the
authorization map order.
aaa authorization map order {remote-only, remote-first, local-only}
no aaa authorization map order
Can be set to one of three choices: remote-first, remote-only, or local-only. Used when
authenticating users via RADIUS or TACACS+. The order determines how the remote user
mapping behaves. If the authenticated user name is valid locally, no mapping is performed.
The setting has the following three possible behaviors:
• remote-first: If a local-user mapping attribute is returned and is a valid local user name, map
the authenticated user to the local user specified in the attribute. Otherwise, if the attribute is
not present or not valid locally, use the user specified by the default-user command. (This is
the default behavior.)