HP StorageWorks 2/16V Brocade Fabric OS Command Reference Manual - Supporting - Page 36

2 aaaConfig The following are the options for --add and --change actions: -p port RADIUS server port number. -s secret Common secret between the switch and RADIUS server. -t timeout Response timeout for the RADIUS server. -a [pap|chap|peap-mschapv2] Use PAP or CHAP or PEAP-MSCHAPv2 as the authentication protocol. The following gives a detailed description of each action type: --show List the current RADIUS servers and their parameters. --add server [-p port] [-s secret] [-t timeout] [-a pap|chap | peap-mschapv2] Adds the specified server to the end of RADIUS configuration list, with specified port number, shared secret, timeout and if PAP or CHAP or MSCHAPv2 is to be used as authentication protocol, server must be different from those in the existing configuration. --remove server Removes the specified server from the RADIUS configuration list.server must match one in the existing configuration. To remove the last server, you must disable RADIUS configuration first. --change server [-p port] [-s secret] [-t timeout] [-a pap|chap | peap-mschapv2] Changes parameters for the specified server in the existing RADIUS configuration list. server must match one in the existing configuration. --move server to_position Moves the specified server in the existing RADIUS configuration list from the current position to the specified new position. This rearranges the order that the specified RADIUS server is used. --localonly Enables the switch-local database for AAA services. Use this to select the switch-local database as the primary AAA service. --radiusonly Enables the current RADIUS configuration for AAA services. Use this to select the RADIUS configuration as the primary AAA service. To enable a RADIUS configuration, at least one server must exist in the configuration. --radiuslocal Enables the current RADIUS configuration as the primary AAA service and the switch-local database as the secondary AAA service. When enabled, if RADIUS authentication fails, the switch-local database will be accessed for AAA services. --radiuslocalbackup Enables the current RADIUS configuration as the primary AAA service and the switch-local database as the backup AAA service. When enabled, if RADIUS authentication fails, requests for AAA services are denied. If the RADIUS server times out, requests are sent to the switch-local database. Examples To display the current RADIUS configuration: switch:admin> aaaconfig --show Position Server Port Secret Timeout(s) Auth-Protocol 1 192.168.233.48 1812 sharedsecret 3 2 192.168.233.44 1812 sharedsecret 3 3 radserver 1812 private 5 CHAP CHAP CHAP 4 Fabric OS Command Reference Manual 53-1000436-01