Setting Up Single Sign-On; Configuring Tacacs+ Authentication - Dell PowerConnect W-Airwave User Manual

1. Go to AMP Setup > Authentication.
2. Complete the fields described on
Table 23 Login Configuration section of AMP Setup > Authentication
Field
Max AMP User Idle
Timeout
Login message
3. Select Save if you are finished, or you can follow the next procedure to configure Single Sign-On, TACACS+
and RADIUS Authentication options.

Setting up Single Sign-On

Administrators can set up single sign-on (SSO) for users that have access to Dell PowerConnect W-Series
controllers. This allows users to log in to an AMP and use the IP Address or Quick Links hypertext links across
AMP to access the controller's UI, without having to enter credentials again. The links the user can select to
access a controller can be found on the APs/Devices > Monitor page in the Device Info section, and on device
list pages.
This feature must be enabled per role in AMP Setup > Roles.
To enable this feature for this AMP, locate the Single Sign-On section in AMP Setup > Authentication. In the
Enable Single Sign-On field, select Yes. Then select Save if you are finished, or you can follow the next
procedure to configure TACACS+ and RADIUS Authentication options.

Configuring TACACS+ Authentication

For TACACS+ capability, you must configure the IP/Hostname of the TACACS+ server, the TCP port, and the
server shared secret. This TACACS+ configuration is for AirWave users, and does not affect APs or users logging
into APs.
1. Go to the AMP Setup > Authentication page. This page displays current status of TACACS+.
illustrates this page when neither TACACS+ nor RADIUS authentication is enabled in AirWave.
Figure 23 TACACS+ section AMP Setup > Authentication
2. Select No to disable or Yes to enable TACACS+ authentication. If you select Yes, several new fields appear.
Complete the fields described in
Table 24 AMP Setup > Authentication Fields and Default Values
Field
Primary Server Hostname/IP
Address
Dell PowerConnect W-AirWave 7.4 | User Guide
Table 23:
Default Description
60 Number of minutes of idle time until AMP automatically ends the user session. Affects all
users of this AMP. The range is 5-240 minutes.
A persistent message that will appear for all of this AMP's users after they log in.
Table 24.
Default Description
N/A Enter the IP address or the hostname of the primary TACACS+ server.
Figure 23
Configuring AMP | 49