OS6860(E)_AOS_8.1.1.R01_Switch_Management_Guide

Setting Up Management Interfaces for ASA
Managing Switch Security
FTP access is now denied on the switch.
Note. The admin user always has switch access through the console port even if access is denied through
the console port.
To remove a server from the authenticated switch access configuration, enter the aaa authentication
command with the relevant server names (s) and leave out the names of any servers you want to remove.
For example:
-> aaa authentication telnet rad1 local
The server ldap2 is removed for Telnet access and will not be polled for user information when users
attempt to log into the switch through Telnet.
Note. SNMP can only use LDAP servers or the local user database for authentication.
Configuring the Default Setting
The default keyword may be used to specify the default setting for all management interfaces except those
that have been explicitly denied. For example:
-> no aaa authentication ftp
-> aaa authentication default ldap2 local
In this example, all management interfaces except FTP are given switch access through ldap2 and the
local user database.
The default keyword may also be used to reset a specified interface to the default interface setting. For
example:
-> aaa authentication ftp default
In this example, FTP users will now be authenticated through the servers that are specified for the default
interface.
page 7-10 OmniSwitch AOS Release 8 Switch Management Guide May 2014