Configuring Authentication
153
IP Storage Router SR2122-2 User Guide
Building the AAA Authentication List
iSCSI authentication uses a list of defined AAA authentication services to
administer its security functions. The list that is created must be named
default
.
To build a list of AAA authentication services to be used for iSCSI authentication:
1.
enable
— Enter Administrator mode.
2.
aaa authentication iscsi
default
local group radius
group
—
Create a list (named
default
) of authentication
services. For example, build a list so that AAA first tries to perform
authentication using the local username database. If AAA fails to find a user
name match, an attempt is made to contact a RADIUS server. If no RADIUS
server is found, RADIUS returns an error and AAA tries to use a
server. If no server is found, returns an error and AAA
authentication fails. If a RADIUS or server does not find a user
name and password match, authentication fails and no other methods are
attempted.
Note:
If local or local-case is the first service in the authentication list and a user name
match is not found, the next service in the list will be tried. If local or local-case is not
the first service, authentication fails if a user name match is not found. Authentication
always fails if a RADIUS or server fails to find a user name match.
Summary of Contents for StorageWorks SR2122
Page 110: ...Configuring System Parameters 110 IP Storage Router SR2122 2 User Guide ...
Page 216: ...Cable and Port Pinouts 216 IP Storage Router SR2122 2 User Guide ...
Page 224: ...Regulatory Compliance Notices 224 IP Storage Router SR2122 2 User Guide ...
Page 232: ...Recommended Host Storage Configurations 232 IP Storage Router SR2122 2 User Guide ...
Page 242: ...Index 242 IP Storage Router SR2122 2 User Guide ...