HP StorageWorks SR2122, Руководство пользователя

Страница: 153 / 242

Configuring Authentication
153 IP Storage Router SR2122-2 User Guide
Building the AAA Authentication List
iSCSI authentication uses a list of defined AAA authentication services to
administer its security functions. The list that is created must be named
default .
To build a list of AAA authentication services to be used for iSCSI authentication:
1.
enable
— Enter Administrator mode.
2.
aaa authentication iscsi default local group radius
group
— Create a list (named
default
) of authentication
services. For example, build a list so that AAA first tries to perform
authentication using the local username database. If AAA fails to find a user
name match, an attempt is made to contact a RADIUS server. If no RADIUS
server is found, RADIUS returns an error and AAA tries to use a
server. If no server is found, returns an error and AAA
authentication fails. If a RADIUS or server does not find a user
name and password match, authentication fails and no other methods are
attempted.
Note: If local or local-case is the first service in the authentication list and a user name
match is not found, the next service in the list will be tried. If local or local-case is not
the first service, authentication fails if a user name match is not found. Authentication
always fails if a RADIUS or server fails to find a user name match.