Alcatel-Lucent OmniSwitch 6250 - Page 1852

AAA Commands
page 43-12 OmniSwitch 6250 CLI Reference Guide November 2009
Platforms Supported
OmniSwitch 6250
Usage Guidelines
• The server type may be RADIUS, TACACS+, LDAP, ACE/Server, or the local user database. Up to 4
servers may be configured for an interface type; at least one is required. Each server name should be
separated by a space.
• The switch uses only the first available server in the list to check for user information. For example, if
server1 is not available, the switch will poll server2. If user information is not found on the first avail-
able server, the authentication request will fail.
• RADIUS, TACACS+, and LDAP servers may each have an additional backup specified through the
aaa radius-server, aaa tacacs+-server, and aaa ldap-server commands.
• If the local switch database will be used as the only authentication server, specify local for server1. If
local is specified as a backup server, it should be entered last in the list of servers. The local user data-
base is always available if the switch is up.
• Only LDAP or the local database may be used for authenticated SNMP management.
• An ACE/Server cannot be specified for SNMP access.
• If Secure Shell (ssh) is enabled, Telnet and FTP should be disabled.
Examples
-> aaa authentication telnet pubs1
-> no aaa authentication telnet
-> aaa authentication default pubs2 pubs3
Release History
Release 6.6.1; command was introduced.
Related Commands
aaa radius-server Configures or modifies a RADIUS server for Authenticated Switch
Access.
aaa ldap-server Configures or modifies an LDAP server for Authenticated Switch
Access.
user Configures user information for the local database on the switch.
show aaa server Displays information about servers configured for Authenticated Switch
Access.