Nortel Networks 5500 series - Manual (Page 290)

290 Configuring system settings
/cfg/sys/adm/audit/servers
followed by:
The index number you specify must be in use.
The index numbers of existing servers with this
index number and higher are incremented by
1.
move <index number> <new
index number>
Moves a server up or down the list of RADIUS
audit servers in the configuration.
•
index number —the original index number
of the server you want to move
•
new index number —the index number
representing the new position of the server
in the list
The index numbers of the remaining entries
adjust accordingly.
Configuring authentication of system users
You can configure the Nortel SNAS cluster to use an external RADIUS
server to authenticate system users. Authentication applies to both CLI
and SREM users.
The user name and password defined on the RADIUS server must be
the same as the user name and password defined on the Nortel SNAS.
When the user logs on, the RADIUS server authenticates the password.
The user group (admin, oper, or certadmin) is picked up from the local
definition of the user.
For more information about specifying user names, passwords, and group
assignments for Nortel SNAS system users, see
“Managing system users
and groups” (page 211) .
When you add an external RADIUS authentication server to the
configuration, the server is automatically assigned an index number. You
can add several RADIUS authentication servers, for backup purposes.
Nortel SNAS authentication will be performed by an available server with
the lowest index number. You can control authentication server usage
by reassigning index numbers (see
“Managing RADIUS authentication
servers” (page 292) ).
To configure the Nortel SNAS to support RADIUS authentication of system
users, use the following command:
/cfg/sys/adm/auth
Nortel Secure Network Access Switch
Using the Command Line Interface
NN47230-100 03.01 Standard
28 July 2008
Copyright © 2007, 2008 Nortel Networks
.