RADIUS auth question.

Post Reply
JustinCCI

RADIUS auth question.

Post by JustinCCI »

Hello,

If there is a better forum area to post this, please let me know.

My understanding is that if you have RADIUS auth enabled and the switch can communicate with the RADIUS server, that it will not use ANY of the onboard database for login, i.e. local admin/switch won't work at all until communication with server is down. Is this the case? I have someone telling me that the local admin account should always work.

Your insight is much appreciated.
silvio
Alcatel Unleashed Certified Guru
Alcatel Unleashed Certified Guru
Posts: 2087
Joined: 01 Jul 2008 10:51
Location: Germany

Re: RADIUS auth question.

Post by silvio »

you can config more than one server:
aaa authentication ssh RAD1 RAD2 local

If now an unser tries to connect via ssh the first server (RAD1) will be asked. Depending from the answer the user can have access. If the first server is down than the next server will used - but not if the first server is alive and the user at this is missing. If both servers are down than the local database within the switch will used. Means at the end: if the RAD is working the local admin can't use for ssh.
best regards
Silvio
Post Reply

Return to “OmniSwitch 6450”