630| Managemen t Access DellPowerConnect W- Series ArubaOS 6.2 | User Guide
d. Click Apply.
In the CLI
aaa authentication-server radius rad1
host <ipaddr>
enable
aaa server-group corp_rad
auth-server rad1
set role condition Class equals it set-value root
aaa authentication mgmt
default-role read-only
enable
server-group corp_rad
For more information about configuring server-derivationrules, see "Configuring Server-Derivation Rules"on page
182.
Disabling Authentication of Local Management UserAccounts
You can disable authentication of management user accounts in local switches if the co nfiguredauthentication
server(s)(RA DIUS or TACACS+) are not available.
You can disable authentication of management usersbased on t he resultsreturned by the authentication server.
Whenconfigured, locally-definedmanagement accounts (for example, admin) arenot allowed to log in if the server
(s) are reachableand the user entry is not found in the authentication server.I n this situation, if the RADIUS or
TACACS+ server is unreachable,meaning it does not receive a response during authentication, or fails to
authenticate a userbecause of a timeout, local authentication is used and you can log in with a locally-defined
managementaccount.
In the WebUI
1. N avigate to the Configuration > Management > Administration page.
2. U nderManagement Authentication Servers, uncheck the Local Authentication Mode checkbox.
3. Click A pply.
In the CLI
mgmt-user localauth-disable
Verifying the con figuration
To verify if authentication of local managementuser accounts is enabled or disabled, use the followingco mmand:
show mgmt-user local-authentication-mode
Resetting the Adm in or Enable Passwo rd
This section describes how to reset the password for the default administrator useraccount (admin) on the
controller.Use this procedureif the administrator user account password is lost or forgotten.
1. Co nnecta local console to t heserial port on the controller.
2. From the console, login in the controller using the usernamepassword and the password for getme!.
3. E nter enablemode by typing in enable, followed by the password enable.
4. E nter configuration mode by typing in configure terminal.