5-4 Motorola Solutions RFS7000GR Series RF Switch, CLI Reference Guide
5.1.1 aaa
Global Configuration Commands
Use this command to configure current Authentication, Authorization and Accounting (AAA) login settings.
Syntax
aaa [authentication|nas|vpn-authentication]
aaa authentication login default [local {radius}|radius {local}]
aaa nas <NAME>
aaa vpn-authentication [primary|secondary] [<IP-Address>] [key] [0 <WORD>|
2 <WORD>|<WORD>]
Parameters
Usage Guidelines
Use AAA login to determine whether management user authentication must be performed against a local user database
or an external RADIUS server.
Example
RFS7000(config)#username motorolaadmin password motorola
RFS7000(config)#username motorolaadmin privilege superuser
RFS7000(config)#aaa authentication login default local
RFS7000(config)#
authentication [login] Configures authentication parameters
• login – Configures the default login authentication list
• default – Configures one of the following default authentication list:
• local {radius} – Local user database
• radius {local} – External RADIUS server
nas <WORD> Configures the Network Access Server (NAS) originating the Remote,
Authentication Dial-in User Service (RADIUS) access request (for VPN only)
• <WORD> – Specify the NAS server name (a string not exceeding 64
characters in length).
vpn-authentication
[primary|secondary]
<IP-Address> [key]
[0 <WORD>|
2 <WORD>|
<WORD>]
Configures the RADIUS server settings
• [primary|secondary] – Configures the primary/secondary RADIUS server
parameters
The following parameters are common to the ‘primary’ and ‘secondary’
keywords:
• <IP-Address> – The RADIUS server’s IP address
• key – The RADIUS client preshared key. This must match with the RADIUS
server.
• 0 <WORD> – Password is specified UNENCRYPTED
• 2 <WORD> – Password is encrypted with password encryption
secret
• <WORD> – Specify the shared secret (should not exceed 32
characters in length)
Comments to this Manuals