Dell Brocade 6520 Command Reference Supporting Fabric OS v7.1.0 - Page 38

2 aaaConfig EXAMPLES "ldap" "tacacs+" "radius;local" "ldap;local" "tacacs+;local" -backup -nologout --help When "ldap" is specified, the first Active directory (AD) server is contacted. If the AD server is not reachable, the next AD server is contacted. If the authentication fails, the authentication process does not check for the next server in the sequence. When "tacacs+" is specified, the first Active directory (AD) server is contacted. If the AD server is not reachable, the next AD server is contacted. If the authentication fails, the authentication process does not check for the next server in the sequence. Enables the current RADIUS configuration as the primary AAA service and the switch-local database as the secondary AAA service. If "radius" and "local" are specified, and if the RADIUS servers are reachable and the user credentials are correct, the user authentication succeeds. If the user provides credentials from the switch database, the RADIUS authentication fails but login succeeds through the switch database. Enables the current LDAP configuration as the primary AAA service and the switch-local database as the secondary AAA service. If "ldap" and "local" are specified, and if the AD servers are reachable and the user credentials are correct, the user authentication succeeds. If the user provides credentials from the switch database, AD authentication fails but login would still succeed through the switch database. Enables the current TACACS+ configuration as the primary AAA service and the switch-local database as the secondary AAA service. If "tacacs+" and "local" are specified, and if the AD servers are reachable and the user credentials are correct, the user authentication succeeds. If the user provides credentials from the switch database, AD authentication fails but login would still succeed through the switch database. For use with the "radius;local", "ldap;local", and "tacacs+;local" options only. The backup option states to try the secondary AAA service only if none of the primary AAA services are available. If -nologout is not specified, a change in the authentication mechanism may result in the termination of existing sessions. All existing sessions are terminated if the new authentication mechanism is one of the following: RADIUS only, LDAP only, TACACS+ only, or Local. If -nologout is specified, there will be no effect on the existing sessions regardless of the chosen authentication mechanism. Displays the command usage. To display the current RADIUS, LDAP, and TACACS+ configurations: switch:admin> aaaconfig --show RADIUS CONFIGURATIONS Position Server Port Secret Timeout(s) Auth-Protocol 1 192.168.233.48 1812 sharedsecret 3 2 192.168.233.44 1812 sharedsecret 3 3 radserver 1812 private 5 CHAP CHAP CHAP 10 Fabric OS Command Reference 53-1002746-01