Siemens RUGGEDCOM ROX II User Manual page 188

Chapter 6
Security
IMPORTANT!
The user authentication mode must be set to tacacsplus_local or tacacsplus_only for users to be
authenticated against the TACACS+ server. For more information about setting the authentication
mode, refer to
To configure TACACS+ authentication, do the following:
IMPORTANT!
Passwords are case-sensitive.
1. Make sure the CLI is in Configuration mode.
2. Type the following:
admin authentication tacacsplus
3. On the Tacacsplus Server Privilege Settings form, configure the following parameters as required:
Parameter
admin-priv { admin-priv }
oper-priv { oper-priv }
guest-priv { guest-priv }
4. On the Primary Tacacsplus Server form, configure the following parameters as required:
Parameter
address { address }
port-tcp { port-tcp }
authentication-key { authentication-key }
5. On the Secondary Tacacsplus Server form, configure the following parameters as required:
Parameter
address { address }
port-tcp { port-tcp }
142
Section 6.7.1, "Setting the User Authentication
Synopsis: A string 1 to 5 characters long
Default: 15
The privilege level(s) for administrator (admin) users. Options include any number
between 0 and 15, or a range (e.g. 4-12).
Synopsis: A string 1 to 5 characters long
Default: 2-14
The privilege level(s) for operator (oper) users. Options include any number between 0
and 15, or a range (e.g. 4-12).
Synopsis: A string 1 to 5 characters long
Default: 1
The privilege level(s) for guest users. Options include any number between 0 and 15, or
a range (e.g. 4-12).
Synopsis: A string 7 to 15 characters long or a string 6 to 40 characters long
The IP address of the TACACS+ server.
Synopsis: A 32-bit signed integer between 1 and 65535
Default: 49
The TCP port to use when connecting the TACACS+ server. The default port is 49.
Synopsis: A string
The authentication key to use for encrypting and decrypting TACACS+ traffic. Use only
ASCII characters.
Synopsis: A string 7 to 15 characters long or a string 6 to 40 characters long
The IP address of the TACACS+ server.
Synopsis: A 32-bit signed integer between 1 and 65535
Default: 49
Mode".
Description
Description
Description
Configuring TACACS+ Authentication
RUGGEDCOM ROX II
CLI User Guide