HP AA979A - StorageWorks SAN Switch 2/8V, Administrator'S Manual, Page: 81 / 465

Fabric OS 5.3.0 administrator guide 83
How to change a RADIUS server configuration
1. Connect to the switch and log in as admin.
2. Enter this command:
NOTE: Protected Extensible Authentication Protocol (PEAP) is an authentication protocol used to
authenticate users and clients. It is based on Extensible Authentication Protocol (EAP) and Transport Layer
Security (TLS).
When PEAP is configured on the switch, clients running Fabric Manager cannot authenticate.
How to change the order in which RADIUS servers are contacted for service
1. Connect to the switch and log in as
admin
.
2.
Enter this command:
When the command succeeds, the event log indicates that a server configuration is changed.
Enabling and disabling local authentication as backup
It is useful to enable local authentication so that the switch can take over authentication locally if the
RADIUS servers fail to respond because of power outage or network problems. To enable or disable local
authentication, enter the appropriate command:
For details about this command and how it is different from
aaaConfig –radiuslocal
, see Table 12
on page 65.
When local authentication is enabled and RADIUS servers fail to respond, you can log in to the default
switch accounts (
admin
and
user
) or any user-defined account. You must know the passwords of these
accounts.
When the command succeeds, the event log indicates that local database authentication is disabled or
enabled.
switch:admin> aaaConfig --change
server
[ -p
port
] [ -s
secret
] [ -t
timeout
] [ -a pap
| chap ]
server
Servers are listed by either name or IP address. Enter either the name or IP
address of the server to be changed.
-p port
Optionally, enter a server port.
-s secret
Optionally, enter a shared secret.
-t timeout
Optionally, enter the length of time (in seconds) the server has to respond
before the next server is contacted.
-a[pap|chap]p
eap-mschapv2
Specify PAP, CHAP or PEAP as authentication protocol. Use
peap-mschapv2 to provide encrypted authentication channel between
switch and server.
switch:admin> aaaConfig --move
server to_position
server
Servers are listed by either name or IP address. Enter either the name or IP
address of the server whose position is to be changed.
to_positio
n
Enter the position number to which the server is to be moved.
switch:admin> aaaConfig –radiuslocalbackup