HP AA979A - StorageWorks SAN Switch 2/8V, Administrator'S Manual, Page: 79 / 465

Fabric OS 5.3.0 administrator guide 81
Vendor-assigned attribute number—Enter the value 1 .
Attribute format—Enter String .
Attribute value—Enter the login role (Root, Admin, Factory, SwitchAdmin, or User) the user group must
use to log in to the switch.
17. In the Multivalued Attribute Information window, click OK .
18. In the Edit Dial-in Profile window, remove all additional parameters (except the one you just added,
“Vendor-Specific”) and click OK .
19. In the Add Remote Access Policy window, click Finish .
20. After returning to the Internet Authentication Service window, repeat steps 5 through 19 to add
additional policies for all login types you want to use the RADIUS server. After this is done, you can
configure the switch.
Configuring RADIUS servers on the switch
RADIUS configuration of the switch is controlled by the
aaaConfig
command.
NOTE: On dual-CP switches (SAN Director 2/128 and 4/256 SAN Director), the switch sends its
RADIUS request using the IP address of the active CP. When adding clients, add both the active and
standby CP IP addresses so that users can still log in the event of a failover.
The following procedures show how to use the
aaaConfig
command to set up a switch for RADIUS
service.
RADIUS configuration is chassis-based configuration data. On platforms containing multiple switch
instances, the configuration applies to all instances. The configuration is persistent across
reboot
and
firmwareDownload
. On a chassis-based system, the command must replicate the configuration to the
standby CP.
Multiple login sessions can invoke the command simultaneously. The last session that applies the change
be the one whose configuration is in effect. This configuration is persistent after an HA failover.
How to display the current RADIUS configuration
1. Connect to the switch and log in as
admin
.
2. Enter this command:
If a configuration exists, its parameters are displayed. If RADIUS service is not configured, only the
parameter heading line is displayed. Parameters include:
switch:admin> aaaConfig --show
Position
The order in which servers are contacted to provide service
Server
The server names or IP addresses
Port
The server ports
Secret
The shared secrets
Timeouts
The length of time servers have to respond before the next server is
contacted
Authenticati
on
The type of authentication being used on servers