Alcatel-Lucent 060321-10, Rev. B, Cli Reference Manual

Page: 1840 / 2354

aaa authentication AAA Commands
page 28-10 OmniSwitch CLI Reference Guide March 2011
aaa authentication
Configures the interface for Authenticated Switch Access and specifies the server(s) to be used. This type
of authentication gives users access to manage the switch.
aaa authentication {console | telnet | ftp | http | snmp | ssh | default} server1 [server2...] [local]
no aaa authentication [console | telnet | ftp | http | snmp | ssh | default]
Syntax Definitions
console Configures Authenticated Switch Access through the console port.
telnet Configures Authenticated Switch Access for any port used for Telnet.
ftp Configures Authenticated Switch Access for any port used for FTP.
http Configures Authenticated Switch Access for any port used for Web-
based management.
snmp Configures Authenticated Switch Access for any port used for SNMP.
ssh Configures Authenticated Switch Access for any port used for Secure
Shell.
default Configures Authenticated Switch Access for any port using any service
(
telnet , ftp , etc.). Note that SNMP access is enabled only if an LDAP or
local server is specified with the command.
server1 The name of the authentication server used for Authenticated Switch
Access. At least one server is required. The server may be a RADIUS,
, LDAP, or the local user database. RADIUS, ,
and LDAP server names are set up through the
aaa radius-server , aaa
-server , and aaa ldap-server commands.
server2... The names of backup servers for Authenticated Switch Access. Up to 3
backups may be specified (including
local ). These backups are only
used if server1 becomes unavailable. They are polled in the order they
are listed in this command. The first available server becomes the
authentication server.
local Specifies that the local user database will be a backup for the authentica-
tion servers. If you want to use the local user database as the only
authentication server, specify
local for server1 .
Defaults
•
At switch startup, Authenticated Switch Access is available through console port via the local data-
base. Authentication for other management interfaces (Telnet, FTP, etc.) is disabled.
•
The default user on the switch is admin , and switch is the password.
Platforms Supported
OmniSwitch 10K