HP A7533A - Brocade 4Gb SAN Switch Base Administrator's Manual page 82

If no RADIUS or LDAP configuration exists, turning on the RADIUS authentication mode triggers an error
message. When the command succeeds, the event log indicates that the configuration is enabled or
disabled.
NOTE: When the RADIUS authentication mode is set to radius;local, you cannot downgrade the Fabric
OS to any version earlier than 5.2.0. Previous versions do not support the radius;local mode.
When the LDAP authentication mode is set to ldap;local, you cannot downgrade the Fabric OS to any
version earlier than 6.x. Previous versions do not support the ldap;local mode.
To enable and disable a RADIUS or LDAP server:
1. Connect to the switch and log in using an admin account.
2. Issue the following command to enable RADIUS or LDAP using the local database:
switch:admin> aaaconfig --authspec "<radius | ldap>;local"
where you specify the type of server as either RADIUS or LDAP, but not both. Local is used for local
authentication if the user authentication fails on the RADIUS or LDAP server.
Example
switch:admin> aaaconfig --authspec "radius;local" --backup
To delete a RADIUS or LDAP server from the configuration:
1. Connect to the switch and log in using an admin account.
2. Issue the following command:
switch:admin> aaaConfig --remove server | all
where:
server
When the command succeeds, the event log indicates that the server is removed.
To change a RADIUS server configuration
1. Connect to the switch and log in using an admin account.
2. Issue the following command:
switch:admin> aaaConfig --change server [-p port] [-s shared secret] [-t timeout] [-a
pap|chap|peap-mschapv2]
where:
server
-p port
-s shared secret
-t timeout
-a[pap|chap|peap-mschapv2]
NOTE: Protected Extensible Authentication Protocol (PEAP) is used to authenticate users and clients. It is based on
extensible authentication protocol (EAP) and transport layer security (TLS).
When PEAP is configured on the switch, clients running Fabric Manager cannot authenticate.
To change an LDAP server configuration:
1. Connect to the switch and log in using an admin account.
82 Managing user accounts
Enter either the name or IP address of the server to be removed.
Enter either the name or IP address of the server to be changed.
Optional: Enter a server port. The default is 1812.
Optional: Enter a shared secret.
Optional: Enter the length of time (in seconds) the server has to
respond before the next server is contacted.
Specify PAP, CHAP or PEAP as authentication protocol. Use
peap-mschapv2 to provide security on the switch.