HP StorageWorks SN6000, Command Line Interface Manual

Page: 97 / 330

HP StorageWorks SN6000 Fibre Channel Switch Command Line Interface Guide 97
9 RADIUS Server Configuration
Authentication can be performed locally using the switch’s security database, or remotely using a Remote
Dial-In User Service (RADIUS) server such as Microsoft RADIUS. With a RADIUS server, the security
database for the entire fabric resides on the server. In this way, the security database can be managed
centrally, rather than on each switch. However, when using a RADIUS server, every switch in the fabric
must have a network connection. You can configure up to five RADIUS servers to provide failover.
You can configure a RADIUS server to authenticate only the switch or both the switch and the initiator
device, if the device supports authentication. A RADIUS server can also be configured to authenticate user
accounts. See ” User Account Configuration ” (page 17). A secure connection is required to authenticate
user logins with a RADIUS server. See ” Connection Security Configuration ” (page 83).
Displaying RADIUS server information
To display RADIUS server information, enter the
show setup radius
command, as shown in the
following example. For information about RADIUS server configuration parameters, see Table 47 .
SN6000 FC Switch #> show setup radius
Radius Information
------------------
DeviceAuthOrder Local
UserAuthOrder Local
TotalServers 2
Server: 1
ServerIPAddress 10.0.0.13
ServerUDPPort 1812
DeviceAuthServer False
UserAuthServer False
AccountingServer False
Timeout 2
Retries 0
SignPackets False
Secret ********
Server: 2
ServerIPAddress bacd:1234:bacd:1234:bacd:1234:bacd:1234
ServerUDPPort 1812
DeviceAuthServer True
UserAuthServer True
AccountingServer True
Timeout 2
Retries 0
SignPackets False
Secret ********