Configuring Tacacs+ Authentication Servers - Network Critical SmartNA-X User Manual

36 | SmartNA-X Administration | SmartNA-X 1G/10G Modular
Figure 24: The Edit authentication types dialog

Configuring TACACS+ authentication servers

The SmartNA-X device can be configured as a Terminal Access Controller Access Control System (TACACS+) client
that relies on a TACACS+ server to provide centralized security, authorizing and authenticating users attempting to access
and administer the unit.
TACACS+ provides the following services:
• Authentication—Provides authentication of administrators logging onto the unit by using usernames and user-defined
passwords.
• Authorization—Performed at login. After the authentication session is completed, an authorization session starts using
the authenticated username. The TACACS+ server then checks user privileges.
• Accounting—Enable accounting of login sessions using the TACACS+ server. This enables a system administrator to
generate accounting reports from the TACACS+ server.
After the authentication session is completed, an authorization session starts using the authenticated username. The
TACACS+ server then checks user privileges. The TACACS+ protocol ensures network integrity, through encrypted
protocol exchanges between the device and the TACACS+ server.
TACACS+ is supported only with IPv4.
TACACS+ servers cannot be used as 802.1X authentication servers to verify credentials of network users trying to join
the networks through the unit.
Some TACACS+ servers support a single connection that enables the device to receive all information in a single
connection. If the TACACS+ server does not support this, the device reverts back to multiple connections.
TACACS+ authentication servers can be configured using the TACACS+ authentication dialog, shown below.
Figure 25: TACACS+ authentication servers dialog
™ ©
SmartNA-X 1G/10G User Guide 1.4 2015 Network Critical Solutions Limited