Configuring local authentication as backup – Dell POWEREDGE M1000E User Manual

Page 176

Advertising
background image

176

Fabric OS Administrator’s Guide

53-1002745-02

Remote authentication

5

Displaying the current authentication configuration

1. Connect to the switch and log in using an account with admin permissions.

2. Enter the aaaConfig

--

show

command.

If a configuration exists, its parameters are displayed. If the RADIUS, LDAP, or TACACS+ service
is not configured, only the parameter heading line is displayed. Parameters include:

Configuring local authentication as backup

It is useful to enable local authentication, so that the switch can take over authentication locally if
the RADIUS or LDAP servers fail to respond because of power outage or network problems.

Example of enabling local authentication as a backup for RADIUS

switch:admin> aaaconfig --authspec "radius;local" --backup

Example for LDAP

switch:admin> aaaconfig --authspec "ldap;local" --backup

Example for TACACS+

switch:admin> aaaconfig --authspec "tacacs+;local" --backup

For details about this command see

Table 17

on page 151.

When local authentication is enabled and the authentication servers fail to respond, you can log in
to the default switch accounts (admin and user) or any user-defined account. You must know the
passwords of these accounts.

When the aaaConfig command succeeds, the event log indicates that local database
authentication is disabled or enabled.

Position

The order in which servers are contacted to provide service.

Server

The server names or IPv4 or IPv6 addresses. IPv6 is not supported when using PEAP
authentication.

Port

The server ports.

Secret

The shared secrets.

Timeouts

The length of time servers have to respond before the next server is contacted.

Authentication

The type of authentication being used on servers.

Advertising