Alcatel-Lucent OmniSwitch 6850-48 Cli Reference Manual page 2557

AAA Commands
Platforms Supported
OmniSwitch 6400, 6850,6850E, 6855, 9000E
Usage Guidelines
•
Use the no form of this command to remove the Authenticated Switch Access configuration for the
specified interface type. If the switch access configuration for an external authentication server is not
removed first, attempting to remove the server configuration from the switch will fail.
•
The server type may be RADIUS, TACACS+, LDAP, ACE/Server, or the local user database. Up to 4
servers may be configured for an interface type; at least one is required. Each server name should be
separated by a space.
•
The switch uses only the first available server in the list to check for user information. For example, if
server1 is not available, the switch will poll server2. If user information is not found on the first
available server, the authentication request will fail.
•
RADIUS, TACACS+, and LDAP servers may each have an additional backup specified through the
aaa radius-server,
•
If the local switch database will be used as the only authentication server, specify local for server1. If
local is specified as a backup server, it should be entered last in the list of servers. The local user
database is always available if the switch is up.
•
Only LDAP or the local database may be used for authenticated SNMP management.
•
An ACE/Server cannot be specified for SNMP access.
•
If Secure Shell (ssh) is enabled, Telnet and FTP should be disabled.
Examples
-> aaa authentication telnet pubs1
-> no aaa authentication telnet
-> aaa authentication default pubs2 pubs3
Release History
Release 6.1; command was introduced.
Related Commands
aaa radius-server
aaa tacacs+-server
aaa ldap-server
user
show aaa server
OmniSwitch CLI Reference Guide
aaa tacacs+-server, and
Configures or modifies a RADIUS server for Authenticated VLANs or
Authenticated Switch Access.
Configures or modifies a TACAS+ server for Authenticated VLANs or
Authenticated Switch Access.
Configures or modifies an LDAP server for Authenticated VLANs or
Authenticated Switch Access.
Configures user information for the local database on the switch.
Displays information about servers configured for Authenticated Switch
Access.
June 2012
aaa ldap-server commands.
page 36-23