Casio ACS V6000 manual Appliance authentication, Authentication servers

36ACS v6000 Installation/Administration/User Guide

authentication method that is configured for the virtual console server or the ports is used for authentication of any user who attempts to log in through Telnet, SSH or the web manager.

Appliance authentication

The virtual console server authenticates for the virtual console server and the ports, either in groups or individually.

NOTE: It is advised when using group authorization that you use the same authorization for both the virtual console server and all serial ports, or use Single Sign-on Authentication to facilitate group authorization.

When Single Sign-on Authentication is disabled, the virtual console server uses the individual port configurations. Users must use their password each time they access an individual port. If enabled, Single Sign-on Authentication will use the authentication server you choose from the pull-down menu for all ports and no further authentication will be needed when accessing the port after that.

NOTE: Selecting unconfigured from the pull-down menu will allow the ports to continue to use individual authentication servers, and will require your password the first time you access any port. After that, the port will not require password authentication if Single Sign-on Authentication is enabled.

To set authentication for the console server:

1.Click Authentication - Appliance Authentication.

2.Select the desired authentication server from the Authentication Type drop-down menu.

3.Select Enable single sign-onto enable single sign-on authentication, and select the desired authentication server from the Authentication Type drop-down menu.

4.Click Save.

Authentication servers

When using an authentication server, you must configure its IP address and in most cases other parameters before it can be used. The following authentication servers require configuration: RADIUS, TACACS+, LDAP(S)AD, Kerberos, NIS and DSView 3 servers.

To configure a RADIUS authentication server:

1.Select Authentication - Authentication Servers - RADIUS.

2.Enter the IP addresses of the First Authentication Server and First Accounting Server.

3.If used, enter the IP addresses for the Second Authentication Server and Second Accounting Server.