Adding A Radius Server To The Switch Configuration; Adding An Ldap Server To The Switch Configuration; Enabling And Disabling A Radius Or Ldap Server - HP A7533A - Brocade 4Gb SAN Switch Base Administrator's Manual

Adding a RADIUS server to the switch configuration

1. Connect to the switch and log in using an account assigned to the admin role.
2. Enter the following command:
switch:admin> aaaConfig --add server [-p port] [-s secret] [-t timeout]
[-a pap | chap | peap-mschapv2]
server
-p port
-s secret
-t timeout
-a
[pap|chap|peap-mscha
pv2]

Adding an LDAP server to the switch configuration

1. Connect to the switch and log in using an account assigned to the admin role.
2. Enter the command:
switch:admin> aaaConfig --add server [-p port] [-t timeout] [-d
domain_name]
server
-p port
-t timeout
-d domain_name
At least one RADIUS or LDAP server must be configured before you can enable the RADIUS or LDAP
service.
If no RADIUS or LDAP configuration exists, turning on the RADIUS authentication mode triggers an error
message. When the command succeeds, the event log indicates that the configuration is enabled or
disabled.
IMPORTANT:
the Fabric OS to any version earlier than 5.2.0. Previous versions do not support the radius;local
mode.
When the LDAP authentication mode is set to ldap;local, you cannot downgrade the Fabric OS to any
version earlier than 6.0.0. Previous versions do not support the ldap;local mode.

Enabling and disabling a RADIUS or LDAP server

Connect to the switch and log in using an account assigned to the admin role.
1.
2. Enter the following command to enable RADIUS or LDAP using the local database:
switch:admin> aaaconfig --authspec "<radius | ldap>;local"
96 Managing user accounts
Enter either a server name or IPv4 or IPv6 address. Avoid duplicating
server listings (that is, listing the same server once by name and again
by IP address). Up to five servers can be added to the configuration.
Optional: Enter a server port. The default is port 1812.
Optional: Enter a shared secret. The default is "sharedsecret". Secrets
can be from 8 to 40 alphanumeric characters long. Make sure that the
secret matches that configured on the server.
Optional: Enter the length of time (in seconds) that the server has to
respond before the next server is contacted. The default is three seconds.
Time-out values can range from 1 to 30 seconds.
Specify PAP, CHAP or PEAP as authentication protocol. Use
peap-mschapv2 to provide encrypted authentication channel between
the switch and server.
Enter either a server name or IPv4 address. Microsoft Active Directory
does not support IPv6 addresses. Avoid duplicating server listings (that
is, listing the same server once by name and again by IP address). Up to
five servers can be added to the configuration.
Optional: Enter a server port. The default is port 389.
Optional: Enter the length of time (in seconds) that the server has to
respond before the next server is contacted. The default is three seconds.
Time-out values can range from 1 to 30 seconds.
Enter the name of the Windows domain.
When the RADIUS authentication mode is set to radius;local, you cannot downgrade