Tacacs+ | HP Enterprise File Services WAN Accelerator guide

Configuring

TACACS+

Authentication

5.Navigate to the Setup: Authentication - Radius Servers page.

6.Specify the Server IP address, the authentication port, server key, time-out interval, retry interval, and, optionally, global settings.

Figure 9-2.Setup: Authentication - RADIUS Servers Page

7.Click Save.

Configuring TACACS+ Authentication in the HP EFS WAN Accelerator

The following section provides the basic steps for configuring TACACS+ authentication in the HP EFS WAN Accelerator.

The following section describes the basic steps for configuring TACACS+ configuration in the HP EFS WAN Accelerator.

You prioritize TACACS+ authentication methods for the system and set the authorization policy and default user.

IMPORTANT: Make sure to put the authentication methods in the order in which you want authentication to occur. If authorization fails on the first method, the next method is attempted, and so forth, until all the methods have been attempted.

9 - RADIUS AND TACACS+

AUTHENTICATION

HP STORAGEWORKS ENTERPRISE FILE SERVICES WAN ACCELERATOR 2.1.5 DEPLOYMENT GUIDE

103

Image 109

HP Enterprise File Services WAN Accelerator manual Tacacs+

Contents

407118-001 HP StorageWorks Enterprise File Services WAN Accelerator Legal and notice information Contents Chapter Wccp Deployments Policy-Based Routing Deployments Radius and TACACS+ Authentication Proxy File Service DeploymentsSerial Cluster and Cascade Deployments 107 Glossary 113 Index 117 About This Guide Introduction Organization of This Guide Boldface Document Conventions Ethernet Network Compatibility Hardware and Software DependenciesAntivirus Compatibility Additional Resources Related Reading HP Storage Web Site Contacting HP Introduction Introduction to the HP EFS WAN Accelerator Designing an HP EFS WAN Accelerator Deployment Virtual Window Expansion Transaction Acceleration Transaction Prediction Design and Deployment Overview Designing AN HP EFS WAN Accelerator Deployment Definition of Terms Bypass Mode Failover Mode Designing AN HP EFS WAN Accelerator Designing AN HP EFS WAN Accelerator Deployment ‹ In-Path,Server-Side, One to One Deployment on In-Path Deployments In-Path, Failover Support Deployment Introduction to Physical In-Path DeploymentsBasic Steps Client-Side Setup Advanced Networking Failover Settings Basic Steps Server-Side In-Path, Two Routing Points Deployment Basic Steps Client-Side Basic Steps Server-Side In-Path, Server-Side Deployment In-Path, Server-Side Deployment In-Path, Server-Side, One to One Deployment Following figure illustrates the server-side of the network Setup Advanced Networking Failover Settings Introduction to Virtual In-Path Deployments Virtual In-Path Network Deployments In-Path, Load Balanced, Layer-4 Switch In-Path, Load-Balanced, Layer-4 Switch Deployment Setup Optimization Service General Settings Introduction to Out-of-Path Deployments Out-of-Path Network Deployments Physical Out-of-Path Deployment Out-of-Path, Failover Deployment Out-of-Path, Server-Side, Failover Support Deployment Setup Optimization Service In-Path Rules Static Cluster Deployment Out-of-Path, Static Cluster Deployment Setup Optimization Service In-Path Rules, Fixed Target Basic Steps Hybrid In-Path and Out-of-Path DeploymentServer-Side Client-Side Setup Optimization Service In-Path Rules Basic Steps Server-Side OUT-OF-PATH Network Deployments Introduction to Connection Forwarding Configuring Connection Forwarding Connection Forwarding in an Asymmetric Network Neighbors Connection Forwarding One-to-One Failover Deployment Configuring Connection Forwarding Management Console Configuring Connection Forwarding Using ‹ Click Update Settings Forwarding Configuring Connection Forwarding Using the CLI ‹ Symmetric Deployments with PBR, Autodiscovery, and CDP on Policy-Based Routing Deployments Overview of CDP Introduction to PBR Wccp PBR How PBR works on a Cisco 6500 Platform Version 12.217d SXB1 Autodiscovery, and CDP on Asymmetric HP EFS WAN Accelerator Deployments With PBR Configuring PBR Using To configure the client To configure the client- side HP EFS WAN AcceleratorSide router Configuring PBR Using Management Console Setup Optimization Service General Settings Setup Optimization Service In-Path Rules Basic Steps Client-Side Basic Steps Server-Side PBR Between VLANs PBR Between VLANs To configure the Cisco To configure the HPEFS WAN Accelerator Router EFS WAN Accelerators Set of commands POLICY-BASED Routing Deployments POLICY-BASED Routing Deployments Symmetric Deployments with PBR Autodiscovery, and CDP POLICY-BASED Routing Deployments Troubleshooting Wccp Deployments ‹ Troubleshooting on Introduction to Wccp Basic Wccp Configuration Failover Support on ‹ To configure a service group Wccp CLI Commands Service group Connecting Basic Wccp ConfigurationAccelerator To configure Configuring Client-Side HPWccp router To add the Wccp service group to Configuring Wccp Using the Management ConsoleAccelerator Enable Wccp on your router Navigate to the Setup Advanced Networking Wccp Groups Setup Service, Wccp Groups To define in-path rules to reach the server- side appliance Basic Steps Server-Side Wccp 3640 router Dual Wccp Deployment Ip cef No ip http server Wccp 6209 router To configure the server-side HP EFS WAN Accelerator Additional Wccp FeaturesTo set the password Security TCP Port Redirection Multicast To change the hashing scheme and assign a weight To configure specific traffic redirection on the routerLoad Balancing Failover Support Troubleshooting Introduction to PFS Proxy File Service Deployments PFS Terms Proxy File Service Description Term PFS Operating Modes How Does PFS Work? PFS When to Use When to use Global Mode To join a domain for Configuring PFS Using the Management Console Setup Proxy File Service PFS Configuration Required Setup Proxy File Service Shares Mode Description Initialize a share To synchronizeTo map a share Information To modify share Details To view share status Introduction to Authentication Radius and TACACS+ Authentication Configuring a Radius Server with FreeRADIUS Requests on To add acceptanceRadius server To download Configuring a TACACS+ Server with Free TACACS+ Authentication Configuring Setup Authentication General Settings TACACS+ 104 105 106 Serial Cluster Deployment Serial Cluster and Cascade Deployments Serial Cluster Basic Serial Cluster Deployment To configure HP EFS WAN Accelerator1 WAN Accelerator2 To configure HP EFSWAN Accelerator3 Cascade Deployment Cascade Deployment Fixed-Target Rules Glossary 114 115 116 PBR Index 118