How To Display The Current Radius Configuration; How To Add A Radius Server To The Switch Configuration - HP AA979A - StorageWorks SAN Switch 2/8V Administrator's Manual

How to display the current RADIUS configuration

1. Connect to the switch and log in as admin.
2. Enter this command:
switch:admin> aaaConfig --show
If a configuration exists, its parameters are displayed. If RADIUS service is not configured, only the
parameter heading line is displayed. Parameters include:
The order in which servers are contacted to provide service
Position
The server names or IP addresses
Server
The server ports
Port
The shared secrets
Secret
The length of time servers have to respond before the next server is
Timeouts
contacted
The type of authentication being used on servers
Authenticati
on

How to add a RADIUS server to the switch configuration

1. Connect to the switch and log in as admin.
2. Enter this command:
switch:admin> aaaConfig --add
[-a pap | chap]
Enter either a server name or IP address. Avoid duplicating server listings
server
(that is, listing the same server once by name and again by IP address).
Up to five servers can be added to the configuration.
Optionally, enter a server port. The default is port 1812.
-p port
Optionally, enter a shared secret. The default is "sharedsecret". Secrets can
-s secret
be from 8 to 40 alphanumeric characters long. Make sure that the secret
matches that configured on the server.
-t timeout Optionally, enter the length of time (in seconds) that the server has to
respond before the next server is contacted. The default is three seconds.
Time-out values can range from 1 to 30 seconds.
Specify PAP or CHAP as authentication protocol.
-a[pap|cha
p]
At least one RADIUS server must be configured before you can enable RADIUS service.
If no RADIUS configuration exists, turning it on triggers an error message. When the command succeeds,
the event log indicates that the configuration is enabled or disabled.
NOTE: When the RADIUS authentication mode is set to radiuslocal, you cannot downgrade Fabric
OS to any version lower than v5.2.x: previous versions do not support the radiuslocal mode.
server port secret
[-p ] [-s
timeout
] [-t ]
Fabric OS 5.2.x administrator guide 75