Radius-server primary, Tacacs no tacacs | Fujitsu BX600 manual

Security Commands

Command Reference

7.9.4.7radius-server primary

This command is used to configure the primary RADIUS authentication server for this RADIUS client. The primary server is the one that is used by default for handling RADIUS requests. The remaining configured servers are only used if the primary server cannot be reached. A maximum of three servers can be configured on each client. Only one of these servers can be configured as the primary. If a primary server is already configured prior to this command being executed, the server specified by the IP address specified used in this command will become the new primary server. The IP address must match that of a previously configured RADIUS authentication server.

Syntax

radius-server primary <ipaddr>

<ipaddr> - is a IP address.

Default Setting

None

Command Mode

Global Config

7.9.5TACACS Configuration Commands

7.9.5.1tacacs

This command is used to enable /disable the TACACS function.

Syntax

tacacs no tacacs

no - This command is used to disable the TACACS function.

Default Setting

244	Intelligent Blade Panel Module

Image 245

Fujitsu BX600 manual Radius-server primary, Tacacs Configuration Commands, Tacacs no tacacs

Contents

Primergy BX600 Blade Server Systems Primergy BX600 Blade Server Systems Comments… Suggestions… Corrections… Page Contents Intelligent Blade Panel Module Intelligent Blade Panel Module Intelligent Blade Panel Module Information About Boards Important Notes Industry Canada Class a Compliance Statements LVD Taiwan Bsmi Class a Australia AS/NZS 3548 1995 Class a Introduction Features of the IBP Module Vlan Transparency Supported Features Layer 2 Features Igmp SnoopingSelf-Learning MAC Addresses Automatic Aging for MAC Addresses Port Backup Support Service Vlan & Service LAN SupportUplink Set Support Port Group Support IBP Module Management Features BootP and Dhcp ClientsSave Configuration as file Various Files of Management Operation Configuration File Download and Upload Snmp Alarms and Trap LogsCommand Line Interface Provision Port Based Authentication Security FeatureLocked Port Support Radius Client System LED Description of Hardware Internal Ports Page Primergy BX620 Primergy GbE Switch Blade 30/12 Internal Ports List Status of LEDs Features and BenefitsPort LEDs Connectivity Management Performance Notational Conventions Target Group Dimensions Technical DataElectrical data National and international standards Environmental conditions Introduction to IBP Network Planning Making Network Connections Connecting to 1000BASE-T Devices 1000BASE-T Cable Requirements Cable Testing for Existing Category 5 Cable 1000BASE-T Pin Assignments Adjusting Existing Category 5 Cabling for 1000BASE-T Unpacking the IBP Module Package ContentsOverview Mount the IBP Module Connecting the IBP Module Select 2 Console Redirection Switch Blade Port Default Settings Start up and Configuration the IBP Module Under Properties, select VT100 for Emulation mode Configuring the Terminal Booting Device Software Download Erasing the Device ConfigurationBoot Image Download System Image Download Operation Code CLI Software Download Through Tftp Server Tftp Enter y. The device reboots Overview Non-Configurable Data Configurable DataCommand Buttons Main Menu View Uplink Set Information Groups Administration Managing Port Groups Configuring Port Group Configuration Command Buttons Viewing Port Group Information Selection Criteria Viewing Vlan Port Group Information Groups Administration Configurable Data Viewing Service LAN Information Groups Administration Configurable Data Viewing Service Vlan Information Groups Administration Managing Port Backup Configuring Port Backup Configuration Viewing Port Backup Status Groups Administration Panel Settings Menu Panel Settings Menu Viewing Panel Description Page Configurable Data Terminal interface via the EIA-232 port Configuring Inband Administration Panel Settings Menu Configuring Telnet Session Page Configurable Data Panel Settings Menu Configuring Serial Port Page Configurable Data Selection Criteria Panel Settings Menu Configuring Dhcp Client-identifier Defining Dhcp Client Configuring Dhcp Restart Defining Snmp Configuring Snmp Community Configuration Configuring Snmp Trap Receiver Configuration Viewing Snmp supported MIBs Panel Settings Menu Panel Settings Menu Viewing Sntp Global Status Non-Configurable Data Configuring Sntp Server Configuration Configurable Data Unknown IPV4 Viewing Sntp Server Status Non-Configurable Data Panel Settings Menu Configurable Data Panel Settings Menu Refresh Refresh the configuration value again Reset the Passwords to Defaults Page Command Buttons Managing System Utilities Panel Reset Command ButtonsReset All Configuration to Defaults Page Command Buttons Configurable Data Uploading Specific Files from Panel Removing Specific File Defining Ping Function Copying Running Configuration to Panel Submit This will initiate the ping Security Menu Viewing Radius Statistics Page Non-Configurable Data Viewing Radius Server Statistics Page Selection Criteria Security Menu Security Menu Resetting All Radius Statistics Page Command Buttons Configurable Data Security Menu Non-Configurable Data Security Menu Viewing Buffered Log Extended Configuration Menu Configuring Command Logger Page Configurable Data Viewing Event Log Configuring Console Log Configuring Hosts configuration Page Configurable Data Configuring syslog configuration Page Configurable Data Extended Configuration Menu Viewing Login Session Page Non-Configurable Data 107 Intelligent Blade Panel Module 108 Intelligent Blade Panel Module 109 Intelligent Blade Panel Module 110 Intelligent Blade Panel Module 111 112 Intelligent Blade Panel Module 113 Intelligent Blade Panel Module Extended Configuration Menu Extended Configuration Menu Viewing Each Port Summary Statistics Page Selection Criteria 117 Intelligent Blade Panel Module 118 Intelligent Blade Panel Module 119 Intelligent Blade Panel Module 120 Intelligent Blade Panel Module Viewing Access Control Summary Page Non-Configurable Data 122 Intelligent Blade Panel Module 123 Intelligent Blade Panel Module Defining Access Control User Login Page Selection Criteria Defining Each Port Access Privileges Page Selection Criteria Extended Configuration Menu Managing IP Filter IP Filter Configuration 128 Intelligent Blade Panel Module Defining User Login 130 Intelligent Blade Panel Module Command CLI Command FormatExample Ip address ipaddr netmask vlan-id Example Clear port-group Values 2CLI Mode-based TopologyParameters Network Address Syntax Address Type Format Range IPAddr ConventionsMacAddr Annotations System Information and Statistics commands Show eventlog Show running-config Show sysinfo Show running-config all scriptname Show hardware Show systemSystem Information Show version Show loginsession Show interface status slot/port all 4Device Configuration CommandsInterface Show interface status Show interface counters Show interfaceShow interface slot/port 142 Intelligent Blade Panel Module Show interface counters detailed slot/port switchport Total Packets Transmitted Octets Total Packets Received Without ErrorsTotal Packets Received with MAC Errors Total Transmited Packets Discards Total Transmit ErrorsTotal Packets Transmitted Successfully 146 Intelligent Blade Panel Module Show interface IBP Show interface switch Interface range Interface Speed-duplex 10 100 full-duplex half-duplex Speed-duplexSpeed-duplex all 10 100 full-duplex half-duplex Full duplex Full duplex half duplex Half duplex Negotiate all no negotiate all NegotiateNegotiate no negotiate Capabilities Storm-control flowcontrol no storm-control flowcontrol DescriptionStorm-control flowcontrol Syntax Show mac-addr-table macaddr all Show mac-address-table igmpsnooping Show mac-address-table multicast macaddr vlanid all Show mac-address-table multicast Show mac-address-table agetime Default Setting Show mac-address-table stats Default SettingShow mac-address-table stats Show mac-address-table agetime Mac-address-table aging-time Igmp Snooping Show Commands Show igmp snooping Igmpsnooping uplinkSetName no igmpsnooping uplinkSetName Configuration Commands IgmpsnoopingPort Channel Lacp Lacp uplinkSetName no lacp uplinkSetName Show lacp Uplink Sets Show Commands Port Group Configuration Commands Uplink-setUplink-set uplinkSetName no uplink-set uplinkSetName Port-group portGroupName no port-group portGroupName Configuration Commands Port-group Port Backup Show Commands Port-backup uplinkSetName no port-backup uplinkSetName Configuration Commands Port-backupDefault Setting Command Mode Port-backup no port-backup Configuration Commands Linkstate Link State Show Commands Show vlan-group vlanGroupName Vlan Port Groups Show CommandsLinkstate uplinkSetName no linkstate uplinkSetName Vlan-group vlanGroupName no vlan-group vlanGroupName Configuration Commands Vlan-group 167 Intelligent Blade Panel Module Configuration Commands Svc-lan Service LAN Show Commands Svc-lan svcLanName no svc-lan svcLanName Configuration Commands Svc-vlan Service Vlan Show Commands Svc-vlan svcVlanName no svc-vlan svcVlanName Show ip redirects Management CommandsNetwork Commands Show ip interface Mtu 1518-9216 no mtu Show ip filter1.4 mtu Ip default-gateway Command UsageIp default-gateway gateway no ip default-gateway Ip address Ip address mgmt-vlan Ip address protocol bootp dhcp vlanID noneIp address protocol Ip filter no ip filter Ip filter Ip filter ipaddr no ip filter ipaddr Serial Interface Commands Show line console Baudrate Line console Password-threshold 0-120 no password-threshold Exec-timeoutPassword-threshold Telnet host port debug line echo Telnet Session CommandsSilent-time Line vty Show line vty Exec-timeout 1-160 no exec-timeout Sessions MaxsessionsMaxsessions 0-5 no maxsessions Telnet sessions Sessions no sessionsTelnet sessions no telnet sessions Telnet maxsessions Telnet maxsessions 0-5 no maxsessions Telnet exec-timeoutTelnet exec-timeout 1-160 no telnet exec-timeout Show telnet Snmp Server Commands Show snmp Show trapflags Snmp-server sysname name Snmp-server sysnameSnmp-server location Syntax Snmp-server location loc Snmp-server community name no snmp-server community name Snmp-server contactSnmp-server community 190 Intelligent Blade Panel Module Snmp-server community ro rw name Snmp-server host ipaddr name no snmp-server host name Snmp-server enable trapsSnmp-server host No This command disables Multiple User trap Snmp Trap Commands Show snmptrap Snmp trap link-status all no snmp trap link-status all Snmp trap link-statusSnmp trap link-status no snmp trap link-status Snmptrap ipaddr Snmptrap name ipaddrSnmptrap name ipaddr no snmptrap name ipaddr Snmptrap mode name ipaddr no snmptrap mode name ipaddr Snmptrap modeHttp commands Show ip http Snmptrap ipaddr name ipaddr ipaddrnew Ip javamode no ip javamode Ip javamode Ip http port 1-65535 no ip http port Ip http portIp http server Ip http server no ip http server Ip http secure-port portid no ip http secure-port Ip http secure-portIp http secure-server Ip http secure-server no ip http secure-server Ip http secure-protocol Secure Shell SSH Commands Show ip ssh Ip ssh protocol Ip sshIp ssh no ip ssh Ip ssh maxsessions 0-5 no ip ssh maxsessions Ip ssh timeoutIp ssh maxsessions Ip dhcp client-identifier Ip ssh timeout 1-160 no ip ssh timeoutDhcp Client Commands Ip dhcp restart System Burned In MAC Address Lockmessage messagestring default Lock CommandsLock lockidentifier Exclusive no lock lockidentifierALL Lockmessage Show lock Lockreset Show logging buffered System Log Management CommandsShow Commands Show logging Show logging hosts Show logging traplogShow logging traplogs Logging buffered no logging buffered Configuration Commands Logging bufferedDisplay Message Index used for deleting Logging console severitylevel 0-7 no logging console Logging buffered wrap no logging buffered wrapLogging console Logging host hostaddress port severitylevel Logging host Logging syslog no logging syslog Logging host reconfigure hostindex hostaddressLogging syslog Clear logging buffered Logging syslog port portid no logging syslog port Script apply Script Management CommandsScript apply scriptname Script delete Script show scriptname Script listScript show Configuration Commands Username User Account Management CommandsShow Commands Show users Username snmpv3 authentication Username username password nopassword no username username Username snmpv3 encryption Show authentication Security CommandsShow Commands Show users authentication Show dot1x Show authentication users Show dot1x detail Show dot1x statistics slot/port Show dot1x statistics Show dot1x users Show dot1x summaryShow dot1x summary slot/port all Show radius Secret Configured Yes / NoShow radius-servers Show radius accounting statistics ipaddr Radius Accounting Mode Enabled or disabled Show radius statistics ipaddr Secret Configured Yes or NoShow radius statistics Show tacacs Show port-security Show port-security dynamic slot/port Configuration Commands Authentication login Possible method values are local, radius, reject, and tacacs Username defaultlogin Username login user listname Username login 3.2 dot1x default-login 3 Dot1x Configuration Commands 3.1 dot1x initialize Dot1x login user listname 3.3 dot1x login3.4 dot1x system-auth-control Dot1x system-auth-control no dot1x system-auth-control 3.6 dot1x port-control 3.5 dot1x user 3.7 dot1x max-req Dot1x re-authentication no dot1x re-authentication 3.8 dot1x re-authentication3.9 dot1x re-reauthenticate Dot1x max-req 1-10 no dot1x max-req 3.10 dot1x timeout Radius accounting mode no radius accounting mode Radius Configuration Commands Radius accounting mode Radius-sever key Radius-server host Retries the maximum number of times Range 1 Radius-server retransmit Radius-server msgauth Radius-server timeoutRadius-server timeout seconds no radius-server timeout Tacacs no tacacs Tacacs Configuration CommandsRadius-server primary Tacacs mode 1-3 master slave no tacacs mode Tacacs modeTacacs server-ip Tacacs server-ip 1-3 ipaddr no tacacs server-ip Tacacs port 1-3 1-65535 no tacacs port Tacacs portTacacs key Tacacs key 1-3 no tacacs key Tacacs timeout 1-3 1-255 no tacacs timeout Tacacs timeoutTacacs retry Tacacs retry 1-3 1-9 no tacacs retry Port-security max-dynamic Port Security Configuration Commands Port-securityPort-security no port-security Default Setting Port-security max-static 0-20 no port-security max-static Port-security max-static Port-security mac-address move Syntax Port-security mac-address move Default SettingPort-security mac-address Show sntp client Sntp CommandsShow Commands Show sntp Configuration Commands Sntp broadcast client poll-interval Sntp client modeSntp client mode broadcast unicast no sntp client mode Sntp unicast client poll-interval Sntp client portSntp client port portid 6-10 no sntp client port Sntp unicast client poll-retry Sntp unicast client poll-timeout Sntp clock timezone Sntp server 10.2.9 System UtilitiesSntp clock timezone name 0-12 0-59 before-utc after-utc Clear Clear arp Clear eventlog Clear traplog Clear pass Clear config Clear mac address table Syntax Clear mac-addr-table dynamic Default SettingClear counters Clear counters slot/port all Clear igmp snooping Enable passwd Clear dot1x statistics all slot/port Clear ip filterClear dot1x statistics Copy Clear radius statisticsClear tacacs Privileged Exec Files download from PC to board Syntax Copy running-config startup-config filename 11.4 dir Copy clibanner url copy url clibanner no clibannerDelete Whichboot Dir boot-rom config opcode filenameBoot-system Display Message Column Heading Description Ping Boot-system boot-rom config opcode filename Traceroute Syntax Logging cli-command Default Setting Logging cli-commandCalendar set Calendar set mm/dd/yy hhmmss Reload ConfigureDisconnect Disconnect 0-10 all Hostname Promptstring Prompt string Default SettingHostname promptstring Quit Ip dhcp client-identifier text text hex hex Dhcp Commands Using Snmp Standard MIBs are listed in the following table Supported MIBs Private enterprise MIB is listed below RFC 2233 IF-MIB Accessing MIB Objects Accessing MIB ObjectsUsing Snmp 279 Intelligent Blade Panel Module Snmp traps supported include the following items Supported Traps Overview system default settings Default Settings SSL Default settings for all the configuration commandsPage In-band Administration SSH DSA Key SSH RSA1 Key SSH RSA2 Key Diagnosing IBP Indicators Troubleshooting and Tips Symptom Action Accessing the Management Interface