Filter
Top Products
11: User Authentication
SLB™ Branch Office Manager User Guide 136
TACACS+
(Terminal Access
Controller Access
Control System)
TACACS+ allows a remote access server to communicate with an
authentication server to determine whether the user has access to the
network. TACACS+ is a completely new protocol and is not compatible
with TACACS or XTACACS. The SLB branch office manager supports
TACACS+ only.
Local Users
Local accounts authenticate users who attempt to log in via SSH,
Telnet, the Web, or the console port.
3. To disable a method currently in the Enabled methods list, select the method and
click the right arrow between the lists.
4. To set the order in which the SLB branch office manager will authenticate users,
use the up and down arrows to the left of the Enabled methods list.
5. For Attempt next method on authentication rejection, you have the following
options:
To enable the SLB device to use all methods, in order of precedence, until it
obtains a successful authentication, select the check box. This is the default.
To enable the SLB branch office manager to use only the first authentication
method that responds (in case a server is down or unavailable), clear the
check box.
6. Click Apply.
Now that you have enabled one or more authentication methods, you must configure
them.
Authentication Commands
The following command for the command line interface corresponds to the web page
entries described above.
To set ordering of authentication methods:
Note: Local Users authentication is always the first method used. Any methods omitted from the
command will be disabled.
set auth <one or more parameters>
Parameters:
authusenextmethod <enable|disable>
kerberos <1-6>
ldap <1-6>
localusers <1-6>
nis <1-6>
radius <1-6>
tacacs+ <1-6>
To view authentication methods and their order of precedence:
show auth