Quick Steps For Configuring Authentication Servers - Alcatel-Lucent OmniSwitch AOS Release 7 Manual

Quick Steps For Configuring Authentication
Servers
1
For RADIUS, TACACS+, or LDAP servers, configure user attribute information on the servers. See
"RADIUS Servers" on page
page 23-14.
2
Use the aaa radius-server,
authentication server(s). For example:
-> aaa radius-server rad1 host 10.10.2.1 10.10.3.5 key amadeus
-> aaa tacacs+-server tac3 host 10.10.4.2 key otna timeout 10
-> aaa ldap-server ldap2 host 10.10.3.4 dn cn=manager password tpub base c=us
Note. (Optional) Verify the server configuration by entering the show aaa server command. For example:
-> show aaa server
Server name = rad1
Server type
IP Address 1
IP Address 2
Retry number
Timeout (in sec)
Authentication port
Accounting port
Server name = ldap2
Server type
IP Address 1
Port
Domain name
Search base
Retry number
Timeout (in sec)
Server name = Tacacs1
ServerIp
ServerPort
Encryption
Timeout
Status
See the CLI Reference Guide for information about the fields in this display.
3
If you are using ACE/Server, there is no required switch configuration; however, you must FTP the
sdconf.rec file from the server to the /network directory of the switch.
4
Configure authentication on the switch. This step is described in other chapters. For a quick overview
of using the configured authentication servers with Authenticated Switch Access, see the OmniSwitch AOS
Release 7 Switch Management Guide.
page 234
23-7, "TACACS+ Server" on page
aaa tacacs+-server, and/or the
= RADIUS,
= 10.10.2.1,
= 10.10.3.5
= 3,
= 2,
= 1645,
= 1646
= LDAP,
= 10.10.3.4,
= 389,
= cn=manager,
= c=us,
= 3,
= 2,
= 1.1.1.1
= 49
= MD5
= 5 seconds
= UP
OmniSwitch AOS Release 7 Network Configuration Guide
23-12, and "LDAP Servers" on
aaa ldap-server command to configure the
March 2011