To change a radius server configuration, Enabling and disabling local authentication – HP Brocade 4Gb SAN Switch for HP BladeSystem p-Class User Manual
Page 53
Fabric OS 5.0.0 procedures user guide
53
To change a RADIUS server configuration:
1.
Connect to the switch and log in as admin.
2.
Issue the following command:
To change the order in which RADIUS servers are contacted for service:
1.
Connect to the switch and log in as admin.
2.
Issue the following command:
When the command succeeds, the event log indicates that a server configuration changed.
Enabling and disabling local authentication
It is useful to enable local authentication so that the switch can take over authentication locally if the
RADIUS servers fail to respond because of power outage or network problems. To enable or disable local
authentication, issue the following command:
Specifying
on
enables local authentication; specifying
off
disables it.
When local authentication is enabled and RADIUS servers fail to respond, you can log in to the default
switch accounts (admin and user) or any user-defined account. You must know the passwords of these
accounts.
RADIUS authentication must be enabled when local database authentication is turned off from the on
state; otherwise, an error is returned.
Because local database authentication may be automatically disabled or enabled when enabling or
disabling RADIUS authentication, you should set the local database authentication explicitly to enabled or
disabled after setting the desired RADIUS authentication configuration.
When the command succeeds, the event log indicates that local database authentication is disabled
or enabled.
switch:admin> aaaConfig --change server [-p port] [-s secret] [-t
timeout] [-a pap | chap]
where:
server
Servers are listed by either name or IP address. Enter either the name or IP
address of the server to be changed.
-p port
Optional: enter a server port.
-s secret
Optional: enter a shared secret.
-t timeout
Optional: enter the length of time (in seconds) the server has to respond
before the next server is contacted.
-a pap | chap
Optional: specify that the PAP protocol be used instead of the CHAP
protocol for packets traveling between the switch and the server.
switch:admin> aaaConfig --move server to_position
where:
server
Servers are listed by either name or IP address. Enter either the name or IP
address of the server whose position is to be changed.
to_position
Enter the position number to which the server is to be moved.
switch:admin> aaaConfig --switchdb on | off