Enabling Radius And Tacacs+ Authentication Servers - Network Critical SmartNA-X User Manual

A S NA-X | M
DMINISTERING MART
See page 97
Changing security levels
Locally managed users (user accounts which are not managed via an AAA server) can have their security level
changed by an Administrator, using the set user level command. The system has three security levels:
• Admin – Administrators have full read-write access to all system settings, including the ability to upgrade
firmware and manage user accounts.
• User – Users/Operators have read-write access to ports, modules, maps and filters.
• Audit - Auditors have read-only access to the system.
For example, to give "johnsmith" Admin access to the system, enter this command at the system prompt:
CONTROLLER>set user johnsmith level admin
See page 98
Removing users
Locally managed users can be removed from the system be an Administrator using the delete user command. For
example, to delete the account for Operator "johnsmith", enter this command at the system prompt:
CONTROLLER>delete user johnsmith
You can use the show users command to output a list of all system users.
CONTROLLER>show users
See page 95

Enabling RADIUS and TACACS+ authentication servers

The system can be configured to authenticate SmartNA-X accounts using RADIUS or TACACS+ servers to valid
account authentication and privileges. This section explains how to set up RADIUS and TACACS+
authentication servers in SmartNA-X. Refer to your RADIUS/TACACS+ authentication server documentation for
details of how to add user accounts to the server.
Using the web UI to add authentication servers
Log in to the web UI.
1.
Click on the main chassis area to access system management settings.
2.
Select the Security tab.
3.
Select RADIUS or TACACS+ as supported by the authentication server. You may also select RADIUS/Local
4.
or TACACS+/Local to fallback to local authentication if access to an authorization server fails.
Add or edit
5.
For RADUIS servers, specify the following configuration options:
• Server address: Specifies the network address of the authentication server.
ANAGING USER ACCOUNTS AND AUTHENTICATION
for information on the set user password command.
for information on the set user level command.
for information on the show users command.
a RADIUS or TACACS+ authentication server.
S NA™ 10G N
MART
DRAFT
A (S NA-X)
ETWORK CCESS MART
27