Creating Fabric Os User Accounts; Syntax For Vsa-Based Account Roles - HP A7533A - Brocade 4Gb SAN Switch Base Administrator's Manual

Hp storageworks fabric os 6.x administrator guide (5697-0015, may 2009)
Hide thumbs Also See for A7533A - Brocade 4Gb SAN Switch Base:
Table of Contents

Advertisement

Table 12
Authentication configuration options (continued)
aaaConfig options
--authspec "ldap"
--authspec "ldap; local"
1. Fabric OS 5.1.0 and earlier aaaConfig
To set the switch authentication mode:
1.
Connect to the switch and log in using an admin account.
2.
Enter this command:
switch:admin> aaaConfig --authspec ["radius" | "ldap" | "radius;local" |
"ldap;local" --backup]

Creating Fabric OS user accounts

RADIUS and LDAP servers allow you to set up user accounts by their true network-wide identity rather than
by the account names created on a Fabric OS switch. With each account name, assign the appropriate
switch access roles.
RADIUS and LDAP support all the defined RBAC roles described in
Users must enter their assigned RADIUS or LDAP account name and password when logging in to a switch
that has been configured with RADIUS or LDAP. After the RADIUS or LDAP server authenticates a user, it
responds with the assigned switch role in a Brocade Vendor-Specific Attribute (VSA). If the response does
not have a VSA role assignment, the User role is assigned. If no Administrative Domain is assigned, then
the user is assigned to the default Admin Domain AD0.
The syntax used for assigning VSA-based account switch roles on a RADIUS server is described in
Table
13.
Table 13

Syntax for VSA-based account roles

Item
Type
Length
Vendor ID
Description
Authenticates management connections
against any LDAP database(s) only. If
LDAP service is not available or the
credentials do not match, the login fails.
Authenticates management connections
against any LDAP database first. If
LDAP fails for any reason, authenticates
against the local user database.
switchdb <on | off> setting.
--
Value
Description
26
1 octet
7 or higher 1 octet, calculated by the server
1588
4 octet, Brocade's SMI Private Enterprise Code
Equivalent setting in Fabric
OS 5.1.0 and earlier
radius
switchdb
--
--
n/a
n/a
n/a
On
Table 8
on page 56.
Fabric OS 6.x administrator guide
1
69

Advertisement

Table of Contents
loading

This manual is also suitable for:

Ae370a - brocade 4gb san switch 4/12

Table of Contents