Table of Contents
Advertisement
Additional Features
TACACS+ Authentication Protocol
In addition to local authentication where the usernames and passwords reside on each individual
SC-ADT device, SC-ADT can be configured for TACACS+ authentication. This capability
supports the CISCO TACACS+ protocol for authentication between the SC-ADT device and the
TACACS+ server. When TACACS+ is enabled, the TACACS+ server becomes the central point
for managing network-wide usernames and passwords. This is especially useful when provisioning
SC-ADT devices in large networks.
TACACS+ usernames and passwords are authenticated for all access methods: craft, Telnet, and
HTTP. You must be logged in with ADMIN privileges to access SC-ADT's TACACS+ commands.
Detailed information and configuration procedures are provided in the paragraphs below.
•
For help in setting TACACS+ parameters, type:
configure tacacs+ ?
•
To show the status of TACACS+, type:
show tacacs+
----------------------------------------------------------------
___________Help for "configure tacacs+"______________________________
account
authen
author
attempts
banner
console
admin
supv
en-pass
fallback
server
key
timeout
testing
----------------------------------------------------------------
TACACS+ Authentication is disabled.
Console Authentication is disabled.
Server IP:
default key:
default timeout: 5
max attempts:
admin username:
supv username:
en -pass state:
fallback state:
tacacs+ banner:
local banner:
Figure 5-1
5-2
Accounting enable/disable (not supported yet)
Authentication enable/disable
Authorization enable/disable (not supported yet)
Set max number of attempts to login; requires 1 parameter(s)
Optional message when starting TACACS+/local authentication
Enable/Disable console user authentication
Define username for Admin password; requires 1 parameter(s)
Define username for Supervisor password; requires 1 parameter(s)
Allow use of TACACS+ Server IP address
Enable/Disablefallback to local authentication
Specify TACACS+ Server IP address
Set TACACS+ default encription key; requires 1 parameter(s)
Default timeout for TACACS+ Server to reply; requires 1 parameter(s)
Authentication testing
3
$gdc_adt_admin$
$gdc_adt_supervisor$
disabled
enabled
Help and Status Displays for TACACS+
SpectraComm ADT
Installation and Operation Manual
TACACS+ Authentication Protocol
076R172-000
Issue 6
Advertisement
Table of Contents
