HP Manager Software manual Set authentication admin

set authentication admin 227

„server-group-name— Uses the defined group of RADIUS servers for authentication. You can enter up to four names of existing RADIUS server groups as methods.

„none — For users with administrative access only, MSS performs no authentication, but prompts for a username and password and accepts any combination of entries, including blanks.

The authentication method none you can specify for administrative access is different from the fallthru authentication type none, which applies only to network access. The authentication method none allows access to the WX switch by an administrator. The fallthru authentication type none denies access to a network user. (See “set service-profileauth-fallthru” on page 352.)

For more information, see “Usage.”

Defaults — By default, authentication is deactivated for all admin users. The default authentication method in an admin authentication rule is local. MSS checks the local WX database for authentication.

Access — Enabled.

History —Introduced in MSS Version 3.0.

The syntax descriptions for the set authentication commands have been separated for clarity. However, the options and behavior for the set authentication admin command are the same as in previous releases.

Usage — You can configure different authentication methods for different groups of users. (For details, see “User Globs, MAC Address Globs, and VLAN Globs” on page 26.)

If you specify multiple authentication methods in the set authentication console command, MSS applies them in the order in which they appear in the command, with these results:

If the first method responds with pass or fail, the evaluation is final.

If the first method does not respond, MSS tries the second method, and so on.

However, if local appears first, followed by a RADIUS server group, MSS ignores any failed searches in the local WX database and sends an authentication request to the RADIUS server group.