Digi Connect IT 16 User Manual page 522

User authentication
8. Add TACACS+ to the authentication methods:
a. Click Authentication > Methods.
b. For Add method, click .
c. Select TACACS+ for the new method from the Method drop-down.
Authentication methods are attempted in the order they are listed until the first successful
authentication result is returned. See
information about rearranging the position of the methods in the list.
9. Click Apply to save the configuration and apply the change.

Command line
1. Log into the Connect IT 16/48 command line as a user with full Admin access rights.
Depending on your device configuration, you may be presented with an Access selection
menu. Type admin to access the Admin CLI.
2. At the command line, type config to enter configuration mode:
> config
(config)>
3. (Optional) Prevent other authentication methods from being used if TACACS+ authentication
fails. Other authentication methods will only be used if the TACACS+ server is unavailable.
(config)> auth tacacs+ authoritative true
(config)>
4. (Optional) Configure the group_attribute. This is the name of the attribute used in the
TACACS+ server's configuration to identify the Connect IT 16/48 authentication group or
groups that the user is a member of. For example, in
attribute in the sample tac_plus.conf file is groupname, which is also the default setting for
the group_attribute in the Connect IT 16/48 configuration.
(config)> auth tacacs+ group_attribute attribute-name
(config)>
Digi Connect IT® 16/48 User Guide
Terminal Access Controller Access-Control System Plus (TACACS+)
Rearrange the position of authentication methods
TACACS+ user
for
configuration, the group
522