Dell POWEREDGE M1000E - Manual (Page 39)

Fabric OS Command Reference 7
53-1001764-02
aaaConfig
2
-s secret Specifies a common secret between the switch and the RADIUS server.
The secret must be between 8 and 40 characters long. This option is
valid only with the -conf radius option, and it is optional. The default value
is sharedsecret.
-a Specifies the remote authentication protocol for the RADIUS server. This
operand is valid only with the -conf radius option, and it is optional. The
default value for this operand is CHAP.
Valid protocols are one of the following:
pap Password Authentication Protocol
chap Challenge-Handshake Authentication Protocol
peap-mschapv2
Protected Extensible Authentication Protocol (requires Fabric OS
v5.3.0 or later)
The distinction between protocols is only applicable to the packets between a
system and the RADIUS server. Between the user and system, passwords are
always used.
--
remove server Removes the specified server from the configuration. The server must match
one of the IP addresses or the names shown in the current configuration.
The following operand is required:
-conf radius|ldap
Specifies the server configuration as either RADIUS or LDAP. If the server is
enabled, the command does not allow the last server to be removed from the
configuration list. RADIUS or LDAP must first be disabled before the last
server of the specified type may be removed.
--
move server option
Moves the specified server from the current position in a RADIUS or LDAP
configuration list to the specified position. If the specified position is the
same as the current position, no change takes place. Valid options are:
-conf radius|ldap
Specifies the server configuration as either RADIUS or LDAP. This operand is
required.
to_position Specifies the new position for the server. The value for to_position is an
integer, and must be within the range of server positions in the current
configuration. Use the --show option to determine current server
positions. This operand is required.
--
authspec “aaa1[;aaa2” [-backup]
Replaces the configuration with the specified AAA service. Each service can
be specified only once in the list, for example, “radius; local; radius” is invalid.
No edit option is provided. The --authspec option takes as an argument a
semicolon-separated list of AAA services. Services must be enclosed in
double quotation marks.
The following AAA services and service pairs are valid:
“local” Default setting. Authenticates the user against the local database only. If the
password does not match or the user is not defined, the login fails.