HP AE370A - Brocade 4Gb SAN Switch 4/12, Administrator'S Manual

Page: 58 / 447

58 Managing user accounts
Configuring the authentication model
This section explains how to configure authentication of the switch management channel connections.
Fabric OS 5.2.x and higher supports use of both the local user database and RADIUS service at the same
time. Use the
aaaConfig
command to set the authentication model for Fabric OS switch management
channel connection authentication model as shown in Table 12 .
NOTE: Set the authentication model on each switch.
How to set the switch authentication model
1. Connect to the switch and log in.
2. Enter this command:
Managing the local database user accounts
User add, change, and delete operations are subject to the
subset
rule: an admin with ADlist 0-10 cannot
perform operations on an
admin
,
user
, or
any
role with an ADlist 11-25. The user account being changed
must have an ADlist that is a subset of the account that is making the change.
Table 12 Authentication configuration options
aaaConfig Option Description Equivalent setting in
Fabric OS 5.1.x and later
--radius
--switchdb
1
1. Fabric OS 5.1.x and earlier aaaConfig --switchdb <on | off> setting.
--localonly Default setting. Authenticates management
connections against the local database only.
If the password does not match or the user is not
defined, the login fails.
Off On
--radiusonly
2
2. The console login will never be set to --radiusonly mode for login recovery purposes. When
- -radiusonly mode is turned on, console login uses the --radiuslocalbackup mode.
Authenticates management connections against
the RADIUS database(s) only.
If the RADIUS service is not available or the
credentials do not match, the log in fails.
On Off
--radiuslocal Authenticates management connections against
any RADIUS databases first.
If RADIUS fails
for any reason , authenticates
against the local user database.
not supported not supported
--radiuslocalbackup Authenticates management connections against
any RADIUS databases.
If RADIUS fails because the service is not
available, authenticates against the local user
database.
On On
switch:admin> aaaConfig [--localonly | --radiusonly | --radiuslocal |
--radiuslocalbackup]