Bay Technical Associates DS62-MD4, DS Series manual Tacacs Configuration

DS62-Network, DS62-MD4 Network/Modem Host Module

Radius	login is	...................Disabled
Enable	? (Y/N),	CR for no change) :

Select “Radius Server Address” to assign a specific radius server IP addresses.

Radius Server IP Address is: 0.0.0.0

Enter radius server address in dotted decimal form :

Select “Radius Backup Server Address” to assign a specific backup server IP addresses.

Radius Backup IP Address is: 0.0.0.0

Enter radius server address in dotted decimal form :

Select “Radius Secret” to assign a shared radius secret. A secret can be up to 16 characters and must be exactly the same as the secret stored on the server.

Radius secret is: HardlyASecret Enter radius secret (16 chars max).

:

Select “Enable DS62 Usernames as Backup” to allow an unsecured access in case all specified radius servers are unavailable.

DS62 usernames as backup login is Disabled

Enable ? (Y/N), CR for no change) :

Select “Radius Login Timeout” a specific amount of time the DS will wait for a response from the radius server after sending the login message to the radius server. A timeout on a radius response is treated, per RFC specifications, as a rejection from the radius server.

Radius response timeout is	5	seconds
Enter timeout, in seconds ( >=5 and		<=30 ) :

TACACS Configuration

TACACS can be used to authenticate logins for the serial port, the network port, modem or all three. When a telnet / SSH session (or rs232 session) is started the Host module will prompt for the username. After entering the username the Host will prompt for the password. After the password is entered the Host will communicate with the TACACS server. If the server verifies the username and password, the Host will display the menus. If the server rejects the username and password or does not respond the Host will display the reason why the login failed.

Setting Up TACACS

25