Aaa Authentication - Alcatel-Lucent OmniSwitch 6250 Cli Reference Manual

AAA Commands

aaa authentication

Configures the interface for Authenticated Switch Access and specifies the server(s) to be used. This type
of authentication gives users access to manage the switch.
aaa authentication {console | telnet | ftp | http | snmp | ssh | default} server1 [server2...] [local]
no aaa authentication [console | telnet | ftp | http | snmp | ssh | default]
Syntax Definitions
console
telnet
ftp
http
snmp
ssh
default
server1
server2...
local
Defaults
•
At switch startup, Authenticated Switch Access is available through console port via the local data-
base. Authentication for other management interfaces (Telnet, FTP, etc.) is disabled.
•
The default user on the switch is admin, and switch is the password.
OmniSwitch 6250 CLI Reference Guide
Configures Authenticated Switch Access through the console port.
Configures Authenticated Switch Access for any port used for Telnet.
Configures Authenticated Switch Access for any port used for FTP.
Configures Authenticated Switch Access for any port used for Web-
based management.
Configures Authenticated Switch Access for any port used for SNMP.
Configures Authenticated Switch Access for any port used for Secure
Shell.
Configures Authenticated Switch Access for any port using any service
(telnet, ftp, etc.). Note that SNMP access is enabled only if an LDAP or
local server is specified with the command.
The name of the authentication server used for Authenticated Switch
Access. At least one server is required. The server may be a RADIUS,
TACACS+, LDAP, ACE/Server, or the local user database. RADIUS,
TACACS+, and LDAP server names are set up through the
server, aaa tacacs+-server, and
ACE/Server will be used, specify ace for the server name. (Only one
ACE/Server may be specified.)
The names of backup servers for Authenticated Switch Access. Up to 3
backups may be specified (including local). These backups are only
used if server1 becomes unavailable. They are polled in the order they
are listed in this command. The first available server becomes the
authentication server.
Specifies that the local user database will be a backup for the authenti-
cation servers. If you want to use the local user database as the only
authentication server, specify local for server1.
November 2009
aaa ldap-server commands. If an
aaa radius-
page 43-11