Alcatel-Lucent 060321-10, Rev. B, Cli Reference Manual

Page: 1841 / 2354

AAA Commands aaa authentication
OmniSwitch CLI Reference Guide March 2011 page 28-11
Usage Guidelines
•
The server type may be RADIUS, , LDAP, or the local user database. Up to 4 servers may
be configured for an interface type; at least one is required. Each server name should be separated by a
space.
•
The switch uses only the first available server in the list to check for user information. For example, if
server1 is not available, the switch will poll server2 . If user information is not found on the first avail-
able server, the authentication request will fail.
•
RADIUS, , and LDAP servers may each have an additional backup specified through the
aaa radius-server , aaa -server , and aaa ldap-server commands.
•
If the local switch database will be used as the only authentication server, specify local for server1 . If
local is specified as a backup server, it should be entered last in the list of servers. The local user data-
base is always available if the switch is up.
•
Only LDAP or the local database may be used for authenticated SNMP management.
•
If Secure Shell ( ssh ) is enabled, Telnet and FTP should be disabled.
Examples
-> aaa authentication telnet pubs1
-> no aaa authentication telnet
-> aaa authentication default pubs2 pubs3
Release History
Release 7.1.1; command was introduced.
Related Commands
aaa radius-server Configures or modifies a RADIUS server for Authenticated Switch
Access.
aaa ldap-server Configures or modifies an LDAP server for Authenticated Switch
Access.
user Configures user information for the local database on the switch.
show aaa server Displays information about servers configured for Authenticated Switch
Access.