Table of Contents
Advertisement
User authentication
7. (Optional) For Service, type the value of the service attribute in the the TACACS+ server's
configuration. For example, in
the sample tac_plus.conf file is system, which is also the default setting in the IX20
configuration.
8. Add TACACS+ to the authentication methods:
a. Click Authentication > Methods.
b. For Add method, click .
c. Select TACACS+ for the new method from the Method drop-down.
Authentication methods are attempted in the order they are listed until the first successful
authentication result is returned. See
information about rearranging the position of the methods in the list.
9. Click Apply to save the configuration and apply the change.
Command line
1. Log into the IX20 command line as a user with full Admin access rights.
Depending on your device configuration, you may be presented with an Access selection
menu. Type admin to access the Admin CLI.
2. At the command line, type config to enter configuration mode:
> config
(config)>
3. (Optional) Prevent other authentication methods from being used if TACACS+ authentication
fails. Other authentication methods will only be used if the TACACS+ server is unavailable.
(config)> auth tacacs+ authoritative true
(config)>
4. (Optional) Configure the group_attribute. This is the name of the attribute used in the TACACS+
server's configuration to identify the IX20 authentication group or groups that the user is a
member of. For example, in
tac_plus.conf file is groupname, which is also the default setting for the group_attribute in the
IX20 User Guide
Terminal Access Controller Access-Control System Plus (TACACS+)
TACACS+ user
configuration, the value of the service attribute in
Rearrange the position of authentication methods
TACACS+ user
configuration, the group attribute in the sample
for
611
Advertisement
Table of Contents
