Table 8.3: Tasks For Setting Up Authentication Servers - Avocent Cyclades ACS Installation/Administration/User Manual

118 Cyclades ACS Advanced Console Server Installation, Administration and Users Guide
3. Click apply changes.
Configuring authentication servers for logins to the console server and
connected devices
If you are configuring any authentication method other than Local, make sure an authentication
server is set up for that method.
The following is a summary of the things you need to know about setting up authentication servers.
• The ACS console server must be on the same subnet as the authentication server.
• Each authentication server must be configured and operational.
• The console server administrator should obtain the necessary information from each
authentication server administrator, in order set up and identify those servers on the ACS
console server.
For example, if LDAP authentication were to be used for logins to the console server and Kerberos
for logins to serial ports, then the console server needs to have network access to an LDAP and a
Kerberos authentication server. The administrator needs to perform setup on the console server for
both types of authentication servers.
The administrator completes the appropriate form through the Web Manager Expert - Security -
Authentication to setup an authentication server for every authentication method to be used by the
console server and its ports.
The following table lists the procedures that apply to each authentication method.

Table 8.3: Tasks for Setting up Authentication Servers

Procedures
To configure a RADIUS authentication server:
on page 118
To configure a TACACS+ authentication server:
on page 119
To configure an LDAP authentication server: on
page 120
To configure a Kerberos authentication server:
on page 121
To configure a NIS authentication server: on
page 123
To configure a RADIUS authentication server:
Perform the following procedure to configure a RADIUS authentication server when the console
server or any of its ports are configured to use RADIUS authentication method or any of its
variations (Local/RADIUS, RADIUS/Local or RADIUS/DownLocal).
Variations
RADIUS, Local/RADIUS, RADIUS/Local or RADIUS/
DownLocal
TACACS+, Local/TACACS+, TACACS+/Local or
TACACS+/DownLocal
LDAP, LDAP/Local or LDAPDownLocal
Kerberos, Kerberos/Local or KerberosDownLocal
NIS, Local/NIS, NIS/Local or NISDownLocal