Configuring Tacacs+ Authentication - Dell PowerConnect W-Airwave User Manual

Configuring TACACS+ Authentication

For TACACS+ capability, you must configure the IP/Hostname of the TACACS+ server, the TCP port, and the
server shared secret. This TACACS+ configuration is for AWMS users, and does not affect APs or users logging
into APs.
1. Go to the AMP Setup > Authentication page. This page displays current status of TACACS+.
illustrates this page when neither TACACS+ nor RADIUS authentication is enabled in AWMS.
Figure 24 AMP Setup > Authentication Page Illustration
2. Select No to disable or Yes to enable TACACS+ authentication. If you select Yes, several new fields appear.
Complete the fields described in
Table 28 AMP Setup > Authentication Fields and Default Values
Field
Primary Server Hostname/IP
Address
Primary Server Port
Primary Server Secret
Secondary Server Hostname/IP
Address
Secondary Server Port
Secondary Server Secret
3. Select Save and continue with additional steps.
4. To configure Cisco ACS to work with AWMS, you must define a new service named AMP that uses https on
the ACS server.
The AMP https service is added to the TACACS+ (Cisco) interface under the Interface Configuration

tab.
Select a checkbox for a new service.

Dell PowerConnect W AirWave 7.2 | User Guide
Table 28.
Default Description
N/A Enter the IP address or the hostname of the primary TACACS+ server.
49 Enter the port for the primary TACACS+ server.
N/A Specify and confirm the primary shared secret for the primary TACACS+
server.
N/A Enter the IP address or hostname of the secondary TACACS+ server.
49 Enter the port for the secondary TACACS+ server.
N/A Enter the shared secret for the secondary TACACS+ server.
Figure 24
Configuring AWMS | 53