HP StorageWorks 1606 Brocade Fabric OS Command Reference v6.3.0 (53-1001337-01 - Page 38

2 aaaConfig Examples "radius" "ldap" "radius;local" "ldap;local" -backup --help When "radius" is specified, the first RADIUS server is contacted. If the RADIUS server is not reachable, the next RADIUS server is contacted. If the authentication fails, the authentication process does not check for the next server in the sequence. When "ldap" is specified, the first Active directory (AD) server is contacted. If the AD server is not reachable, the next AD server is contacted. If the authentication fails, the authentication process does not check for the next server in the sequence. Enables the current RADIUS configuration as the primary AAA service and the switch-local database as the secondary AAA service. If "radius" and "local" are specified, and if the RADIUS servers are reachable and the user credentials are correct, the user authentication succeeds. If the user provides credentials from the switch database, the RADIUS authentication fails but login succeeds through the switch database. Enables the current LDAP configuration as the primary AAA service and the switch-local database as the secondary AAA service. If "ldap" and "local" are specified, and if the AD servers are reachable and the user credentials are correct, the user authentication succeeds. If the user provides credentials from the switch database, AD authentication fails but login would still succeed through the switch database. For use with the "radius;local" and "ldap;local" options only. The backup option states to try the secondary AAA service only if none of the primary AAA services are available. Displays the command usage. To display the current RADIUS configuration: switch:admin> aaaconfig --show RADIUS CONFIGURATIONS Position Server Port Secret Timeout(s) Auth-Protocol 1 192.168.233.48 1812 sharedsecret 3 2 192.168.233.44 1812 sharedsecret 3 3 radserver 1812 private 5 CHAP CHAP CHAP Primary AAA Service: Switch database Secondary AAA Service: None LDAP CONFIGURATIONS LDAP configuration does not exist. To move the RADIUS server "radserver" from position 3 to position 1: switch:admin> aaaconfig --move radserver -conf radius 1 To configure the RADIUS server 192.168.233.48 as an LDAP server: switch:admin> aaaconfig --change 192.168.233.48 -conf ldap -p 3002 -s newsecret -t 1 To add an AD/LDAP server to the configuration: switch:admin> aaaconfig --add 194.72.68.335 -conf ldap -p 3002 -d brocade.com -t 1 8 Fabric OS Command Reference 53-1001337-01