Brocade Mobility RFS Controller CLI Reference Guide (Supporting software release 5.5.0.0 and later) User Manual

Page 1267

Advertising
background image

Brocade Mobility RFS Controller CLI Reference Guide

1259

53-1003098-01

26

Wireless Controllers — Brocade Mobility RFS4000, Brocade Mobility RFS6000, Brocade
Mobility RFS7000

Service Platforms — Brocade Mobility RFS9510

Syntax:

authentication [access-method|directed-request|server|service]

authentication access-method [all|console|ssh|telnet|web]

{(console|ssh|telnet|web)}

authentication directed-request

authentication server <1-2> [host|retry-timeout-factor|timeout]

authentication server <1-2> host <IP/HOSTNAME> {secret [0 <SECRET>|2

<SECRET>|<SECRET>]}

{port <1-65535>}

authentication server <1-2> retry-timeout-factor <50-200>

authentication server <1-2> timeout <3-60> {attempts <1-10>}

authentication service <SERVICE-NAME> {protocol <AUTHENTICATION-PROTO-NAME>}

Parameters

authentication access-method [all|console|ssh|telnet|web]

{(console|ssh|telnet)}

authentication directed-request

authentication server <1-2> host <IP/HOSTNAME> {secret [0 <SECRET>|2 <SECRET>|

<SECRET>]} {port <1-65535>}

access-method

Configures access modes for TACACS authentication. The options are: console, SSH, Telnet, Web, and all

all

Authenticates users using all access modes (console, SSH, and Telnet)

console

Authenticates users using console access only

ssh

Authenticates users using SSH access only

telnet

Authenticates users using Telnet access only

web

Authenticates users using Web interface only

directed-request

Enables user to specify TACACS server to use with `@server'. This option is disabled by default.
The specified server should be present in the configured servers list.

server <1-2>

Configures a TACACS authentication server. Up to 2 TACACS servers can be configured

<1-2> – Specify the TACACS server index from 1 - 2.

host <IP/HOSTNAME>

Sets the TACACS server’s IP address or hostname

secret [0 <SECRET>|
2 <SECRET>|<SECRET>]

Configures the secret key used to authenticate with the TACACS server

0 <SECRET> – Configures a clear text secret

2 <SECRET> – Configures an encrypted secret

<SECRET> – Specify the secret key. The shared key should not exceed 127 characters.

port <1-65535>

Optional. Specifies the port used to connect to the TACACS server

<1-65535> – Specify a value for the TCP authentication port from 1 - 65535. The default port is
49.

Advertising