Enabling And Disabling Local Authentication As Backup; Boot Prom Password - HP A7533A - Brocade 4Gb SAN Switch Base Administrator's Manual

To change an LDAP server configuration:
Connect to the switch and log in using an admin account.
1.
2. Enter this command:
switch:admin> aaaConfig --change server [-p port] [-t timeout] [-d domain_name]
server
-p port
-t timeout
-d
domain_name
To change the order in which RADIUS or LDAP servers are contacted for service:
1. Connect to the switch and log in using an admin account.
2. Enter this command:
switch:admin> aaaConfig --move server to_position
server
to_position
When the command succeeds, the event log indicates that a server configuration is changed.

Enabling and disabling local authentication as backup

It is useful to enable local authentication so that the switch can take over authentication locally if the
RADIUS or LDAP servers fail to respond because of power outage or network problems. To enable or
disable local authentication, enter the following command for RADIUS:
switch:admin> aaaconfig --authspec "radius;local" --backup
or for LDAP,
switch:admin> aaaconfig --authspec "ldap;local" --backup
For details about this command see
When local authentication is enabled and the RADIUS or LDAP servers fail to respond, you can log in to
the default switch accounts (admin and user) or any user-defined account. You must know the passwords of
these accounts.
When the command succeeds, the event log indicates that local database authentication is disabled or
enabled.

Boot PROM password

The boot PROM password provides an additional layer of security by protecting the boot PROM from
unauthorized use. Setting a recovery string for the boot PROM password enables you to recover a lost boot
PROM password by contacting HP. Without the recovery string, a lost boot PROM password cannot be
recovered.
You should set the boot PROM password and the recovery string on all switches, as described in
the boot PROM password with a recovery
the boot PROM password without the recovery string, see
recovery string" on page 83.
80 Managing user accounts
Enter either a server name or IPv4 address. Microsoft's Active Directory
does not support IPv6 addresses. Avoid duplicating server listings (that is,
listing the same server once by name and again by IP address). Up to five
servers can be added to the configuration.
Optional: Enter a server port. The default is port 389.
Optional: Enter the length of time (in seconds) that the server has to
respond before the next server is contacted. The default is three seconds.
Time-out values can range from 1 to 30 seconds.
Enter the name of the Windows domain.
Enter either the name or IP address of the server whose position is to be changed.
Enter the position number to which the server is to be moved.
Table 12 on page 68.
string" on page 81. If your site procedures dictate that you set
"Setting the boot PROM password without a
"Setting