- Community Home
- >
- Networking
- >
- Switching and Routing
- >
- Comware Based
- >
- Re: How to configure a local backup authentication...
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-25-2013 01:50 PM
05-25-2013 01:50 PM
Hi,
I'm in the process of migrating some Cisco switches to HP 5500 switches.
I've been asked to configure a Radius authentication via SSH and an authentication fallback (local backup account if the Radius server is unavailable).
The Radius authentication works perfectly (against a FreeRadius server) but I've never been able to authenticate locally with the backup account via ssh.
Do you have any idea on the way to configure that ?
Thanks
Herve
Here's my config:
radius scheme myclient
server-type extended
primary authentication 10.2.100.158 key cipher $c$3$sA35wrbccHrKrIDaqhxi/yE9EX1w6O3eJLF3
primary accounting 10.2.100.158 key cipher $c$3$ir/FVc7+XYviIvwLVMnH4bIwNwiNVq+jrwmf
user-name-format without-domain
#
domain myclient-intra
authentication default radius-scheme myclient
authorization default radius-scheme myclient
accounting default radius-scheme myclient
access-limit disable
state active
idle-cut disable
self-service-url disable
local-user backup
password cipher $c$3$a81Tg/xv7aUqGorNUEIiYYHXxiptuX+ybjZY9w==
authorization-attribute level 3
service-type ssh
user-interface vty 0 15
authentication-mode scheme
protocol inbound ssh
Solved! Go to Solution.
- Tags:
- local-user
- ssh
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-26-2013 11:34 PM
05-26-2013 11:34 PM
SolutionDear Arthis
There are two ways:
Login as backup@system to authenticate with the local users.
Or add the local authentication as fallback if the radius is not avaible (depends on the software version):
domain myclient-intra
authentication default radius-scheme myclient local
authorization default radius-scheme myclient local
accounting default radius-scheme myclient local
br
Manuel
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-27-2013 10:54 AM
05-27-2013 10:54 AM
Re: How to configure a local backup authentication ?
Thanks a lot for you answer. It works perfectly.
Herve