Nortel Networks 4050 Specifying authentication fallback order using the CLI, Export protocol

Chapter 6 Configuring authentication 267

/cfg/domain 1/aaa/auth #/local

followed by:

export <protocol>

<server> <filename> <key>

Exports the local database to the specified TFTP/FTP/SCP/SFTP file exchange server. You are prompted to provide the following information:

•protocol is the export protocol. Options are tftpftpscpsftp.

•server is the host name or IP address of the server.

•filename is the name of the destination database file on the server (for example, db.txt).

•key is the password key for user password protection. If you are not protecting the file with a key, enter any characters (a minimum of four) when prompted.

•FTP user name and password, if applicable.

The file is exported in ASCII format. Each row entry consists of values for user name, password (encrypted), and group, separated by a colon. The following is an example of an exported user record with the password encrypted:

john:$2$7á?yLs…ßìöonž±†:trusted

where $2$ indicates an encrypted password

Specifying authentication fallback order using the CLI

Authentication in the Nortel SNA solution is performed by checking client credentials against available authentication databases until the first match is found. You specify the order in which the Nortel SNAS 4050 applies the methods configured for the Nortel SNAS 4050 domain.

Nortel Secure Network Access Switch 4050 User Guide