Aaa fallback, Enabled TACACS+ fallback | Kentrox AI232 specification

AI232 Version 9.6x User’s Guide

AI232 Commands: aaa fallback

aaa fallback

Description

This command enables or disables TACACS+ fallback for shell access. If TACACS+ fallback is enabled and attempts to contact all configured TACACS+ servers fail, then AI232’s user database is used for authentication and authorization. The AI232 local log file is used for accounting.

Command Type

shell

Formats

aaa fallback { disable enable }

Parameters

disable Disables TACACS+ fallback.

enable Enables TACACS+ fallback.

Command Defaults

Enabled TACACS+ fallback

Examples

This example displays the disabling of TACACS+ fallback.

[232]aaa fallback disable [232]

8-10

Image 182

Kentrox AI232 manual Aaa fallback, Enabled TACACS+ fallback, This example displays the disabling of TACACS+ fallback

Contents

AI232 Port High Speed Asynchronous Line Card User’s Guide Page About this Document Document Conventions Tip Laser Danger Electrostatic Discharge Caution Ground Caution Proper Cooling Caution FCC Warning Email Support Customer AssistanceWeb Site Support Phone Support Table of Contents System Configuration Link Configuration Diagnostics for TID Multiplexing TID Multiplexing TOC-5 AI232 Commands AI232 Menu Aliases FTP Sessions Appendix a AI232 Crash Codes Product Description Features Standalone Configuration System Diagnostics AI232 Hardware Components Ports 9-16 Connector Ports 25-32 ConnectorPorts 17-24 Connector Ports 1-8 Connector Technical Specifications Component Description Distribution Panels Specifications for DP232-19/23Description Specification Model DP232-19/23 Pin Assignments Signal DCD Connect to the AI232 Installation ProcedureModel DP232-RJ45 Ports Places Specifications for DP232-RJ45 Pin Signal Description Quantity Install the mounting flanges in the desired locationParts List Cable CAB467 Places DP232-RJ45 Typical Applications Asynchronous to TCP/IP Application Modem Multiplexer Application Illustrates a modem multiplexer application Using the AI198 Menu System Accessing the Menu System Types of Menu Items Navigating the Menu SystemMenu Numbering Structure Submenus Menu re-appears with the entered IP address TogglesData Menu Item Description FunctionsMenu Item Descriptions Exiting the Menu System AI232 Local Menu System TACACS+ Authentication Multilevel User Name and Password SecurityRadius Authentication Identifying AI232 Menu System Security Options PPP Authentication Protocols PAP and Chap Using a Telnet Connection for Login Logging Into AI232 Using an Asynchronous Port for Login Consecutive failed login attempts Number of consecutive failed login attempts Accessing the Local Menu System Data Entry Items Navigating the Local Menu SystemIdentifying Types of Menu Items Direction Keys Toggle Items Accessing the Help Menu Send Exiting the Local Menu System Save the changes AI232 Version 9.6x User’s Guide System Configuration Description General System Properties ConfigurationDestination Menu Break Sequence Format Configuration in the AI198 Menu System Menu Item Type Toggle for both menu items Ethernet Port SettingsConfiguration in the AI232 Local Menu System FTP Port This menu item sets the FTP server port number IP Settings This example displays 16 FTP port number set to Menu Item Types This item sets the system prompt value in the CLI Access the System MenuSystem Prompt To on TCP SettingsToggle Telnet Port This item sets the Telnet port value for AI232 This example displays Telnet Port set to Radius Configuration Server Settings Enabled Shell/FTP Options To configure the shell/FTP Radius option Access MenuFALLBACK. The default is Disabled Enabled TACACS+ Configuration Shell/FTP Options 00049 AI232 Local Menu Item Configuration Snmp ConfigurationAuthentication Traps Community Names Data for all menu items Following example displays WriteComm Menu Contact Persons Node Information Snmp Manager 10.65.32.4 Static Route Configuration IP Address Settings Following are available TID to Modem Mux ConfigurationInactivity Timeout This example displays Inactivity Timeout set to Initialization String Toggle for all menu items Port Bit SettingsThis example displays Init String set to conn23 TID to Route AI232 Local Menu Item Configuration Time Configuration Daylight Savings Time Access the Time Menu located under the System Menu Sntp SettingsSettings Time Zone This following example displays AI232 Version 9.6x User’s Guide Link Configuration Asynchronous AI232 has 3 configurable link typesAI232 Link Types Asynchronous PPP Modem Multiplexer Alias Connect Options ConfigurationAccess Menu For 02 Alias, enter 2, and the alias name Link Type Availability Call Retry Interval This example displays 02 Alias set to async.4.1 Connect String This example displays 03 Call retry interval set to 00134 Default is OFF Connection SettingsConnection settings are configured using three menu items Is on 00030 Link Application Login Disconnect inactivity timer when the link receives a call Disconnect Options ConfigurationDisconnect Inactivity Timer Settings Is Off Select on or OFF. The default is on This example displaysOff. The default is On This example displays Default is on Disconnect SettingsDisconnect settings are configured using two menu items Disconnect String Disconnect Async, AsyncPPP, and ModMux General Link Properties ConfigurationAuto Disable Error Limit Flow Control This example displays SW Flow Control set to XonXoff Access the Link MenuLink Description This menu item defines a description for a link Link Number This example displays 01 Link number set to This menu item enables or disables a linkLink State This example displays Link state set to Disabled Link Type Port Data Bits Async and AsyncPPP Port Parity This example displays Port data bits set to Seven This menu item defines the baud rate for a port Port SpeedThis example displays Port parity set to Odd Data in the AI232 local menu system Menu 4.2.14.12.5 appears Port Stop Bits Xon Repeat Interval This example displays 10 Xon Repeat interval set to Following menu items are available for PPP configuration General PPP Properties ConfigurationIpcp Address Settings AsyncPPP and ModMux Ipcp Address Parameters Maximum Unit Settings Set to Network Control Protocol For an Ipcp network control protocol Ipcp Modem Option Configuration Modem String Dialing Time-out Interval Number of Dial Attempts This example displays Dialing time-outset to Modem Setup Menu This example displays Number of dial attempts set to PPP Authentication Configuration Local Authentication Settings PAP RAS Option This example displays RAS Option set to RADIUS/Fallback Remote Authentication Settings Chap RTS/DTR Lead Control Configuration DTR State Configuration RTS State Configuration Flow Control DTR connect state Off DTR disconnect state TID Multiplexing Overview AI232 Version 9.6x User’s Guide Menu appears TID Multiplexing ConfigurationConfiguring the Parent Alias Values are 1 to Destination Configuring the Children Aliases TidforAI232 Defines the terminal identifier for AI232 During the parent alias configuration TIDtid Second child connection Example ConfigurationsFor Alias name, enter YES Alias Edit Menu Alias Name 172.16.30.61#6001 PARENT1.1 Alias Edit Menu Alias Name Normal Response Format TID Multiplexing TroubleshootingParameters Response Item Description Error Response Format Normal Response Example Errcde Diagnostics for TID MultiplexingError Response Example AI232 Version 9.6x User’s Guide Alias and Call Routing Configuration AI232 Card B IP address DownstreamIncoming Outgoing Asynchronous TCP/IP CallCall Upstream AI232 Version 9.6x User’s Guide Call Routing Configuring an AliasConfiguring an Alias in the AI198 Menu System AI232 Version 9.6x User’s Guide AI232 Version 9.6x User’s Guide Configuring an Alias in the AI232 Menu System For Display Alias in Destination Menu, select Yes or No Source/Destination Protocol Tables Menu Item Information Source Destination Menu Item InformationSource Async with TCP/IP Source Without Telnet Breaks AI198TCP/IP Source With Telnet Breaks AI198 Async break Telnet break Example asy.3 Asynchronous Source Without Breaks AI232Asynchronous Source With Breaks AI232 TCP/IP Source Without Telnet Breaks AI232 TCP/IP Source With Telnet Breaks AI232 Protocol Processing Modules Module Types Return followed by a line feed Characters. The packet module accepts only one -S parameter To zero, this option is turned offSpecify up to 16 characters Feed and delete Provides TL1 packetizing and sets the packetizing timer toSeconds Provides TL1 packetizing and prevents breaks from passing Propagated upstream Echo 1 when the connection is initiated. Initiates will SGAProvides Telnet handling, but prevents breaks from being Echo and will SGA Alias Macro Components Start SymbolsAlias Macros Variables CommentsConstants Variable Value Operator Description Wildcard SymbolsOperators Alias Macro Function Description of Operation Returns the entire string Match any of the expressions, then default isGreater than the length of string, the function Returns the length of string Alias Macro Configuration Configuration Examples =LA,PA,’#’,1-1=MYIP1 AI232 Version 9.6x User’s Guide AI232 Commands Shell Connections Commands OverviewShell Commands Establishing a Local Shell Connection Establishing a Remote Shell Connection Winslc CommandsDisplaying winslc Command Logging Header Element Description Using winslc CommandsLog/Alarm Message Header Specifies the message severity level Introduces the log/alarm messageSpecifies the current date Specifies the line card baseport number Aaa account Command TypeCommand Defaults Formats Aaa authen Enables TACACS+ authenticationDisables TACACS+ authentication Connections Aaa author Priv-lvl Aaa chpass This example displays the disabling of TACACS+ fallback Enabled TACACS+ fallbackAaa fallback Enables TACACS+ authentication with fallback Disables TACACS+ authenticationEnables TACACS+ authentication with no fallback Disabled all links Profile. Individual values are separated by commas , No associations configuredAaa profile Specifies the name of an existing profile Aaa profile 2 newprof1 Connection attempt Aaa retryMade. Valid values are 1 to Aaa stats Display Item Description Authorization instead of the TACACS+ server Displays the number of TACACS+ authorizationDisplays the number of failed TACACS+ authorization Where AI232’s system log was used for accounting Aaa summary Per-command based on per-command request/reply handling Displays the status of FTP access as AAA TACACS+Displays the TACACS+ authorization method for the AI232 Displays the TACACS+ accounting status of user login events Resets the timeout value to its default Aaa timeoutTACACS+ server when a connection attempt is made. Valid Values are 1 to Alarm Command Type shell Formats This example displays all system alarms in group links This example displays alarms for links 5-8in group links This example displays all alarms by severity level This example displays the unmasking of alarm group links Command Types Arp Column Description 172.16.30.117 Break 232break 10.40.5.11#1821 Breaking connection 10.40.5.11#1821 Reset error counters for links 1 CresetTo reset error counters for links 1, 2, Example, 1,2-3 to reset error counters for links 1, 2, Date Debug This example displays the enabling of all debug data logging Filename Defines the name of the file to delete This command deletes a specified file that resides on AI232Delete This example displays the deletion of file log.txt Diag-conn Pattern 1, Logic 2, and Pattern 3 are evaluated before This option prompts for the ID of the connection to viewDisplays details for that connection Logic 4 and Pattern 5 are considered Using Interpretation Mode Diag-eth Using the Help Option Deletes a filter Following formats apply to filtersAdds a filter Defines the source address MAC, IP, or TCP/UDP Adds or deletes a specific protocol filter. Available MAC/IP address settingsDefines the TCP/UDP port number regardless Protocol filters are This example displays Ethernet diagnostic help information Ijkl FF FC This example displays the deletion of filter protocol tcp This example displays the deletion of all filters Diag-info Displays the number of free or available Streams resources Last resetDisplays the name of the Streams resource Display Displays the state of the driver. Two states are available Connection to be enabledDisplays the link number Specifies that the link is not established Received packets Had CRC errorsDisplays the number of frame length violations Displays the number of short received frames Displays the number of bytes received on Displays the number of frames received onConnection Displays the number of times transmitted frames Displays the number of frames received on the connection Does not indicate an errorDisplays the number of transmit errors that have occurred Displays the number of bytes received on the connection Excessive deferral timer is exceeded. An excessive deferral ErrorsDisplays the number of alignment errors Error is recorded when the following events occur Following values may appear Ethernet interface needs to be resetDisplays the current state of the Ethernet interface. Ethernet interface is uninitialized Diag-line Option Function Diag-line Only present in data packets, then the data byte count is Displayed as Ascii String Diag-tconn Baseport Defines the baseport number for AI232 Dir This example displays all available files Exit This example displays an exit from the current shell session Head This command displays the first few lines of a fileDefines the number of lines to display. The default is Defines the name of the file to display Help This example displays a list of all available commandsThis example displays help information for command show This example displays the current user name and profile This command displays the current user name and profileFormats Examples This example displays the configured IP address information Ip init Enter IP Address Range default 1 Setting range to 232 Link Enables the serial linksDisables the serial links Restarts the serial links This example displays the starting of links 1 through 4 This example displays the stopping of links 6 This command turns the display of log messages on or off Log This example displays the closing of a shell session This command closes a shell sessionLogout This command displays a list of available files This example displays the AI232 Main Menu This command accesses the AI232 main menu systemMenu Modmux Displays the phone number that was dialed More 232more log.txt Winslc This command forces AI232 to crash dump and haltPanic Baseport Defines the AI232 baseport number This command changes an existing user’s password Passwd Ping Pppstatus Displays one of the following IP address of AI232 if the link status is Running Profile Adds write permission for a command that otherwise would Adds commands to a profile and optionally adds writeDefines the name of a command to associate with a user Deletes commands from a user profile Pvclist This example displays PVC information for link Column Description This example displays the resetting of AI232 ResetThis command resets AI232 Ipaddress Defines the IP address of the default router Router Usage Notes Selcnf Configuration fileSpecifies the option that deletes a configuration file Extension PDisplays the content of the file one page at a time Sholog Show Displays the version number of AI232 Displays the default and backup gateway IP addressDisplays the IP address, subnet mask, and high IP address Displays the date and time Lead is negated This command displays the status of the EIA leadsStaeia DCD This example displays the current standalone mode status Standalone Staslc Displays the number of framing errors Is asserted and means the signal is negatedDisplays the number of parity errors Displays the number of overrun errors Syncflash Tacacs info Tacacs server Defines the server IP address Tacacs server ipSpecifies a server number or range of server numbers. Valid 0.0 Tacacs server phase Tacacs server phase 1-5,8 disable account Values are 1 through Tacacs server portDefines the TCP port number for the TACACS+ servers. Valid TCP port No secret configured Tacacs server secret Displays the server numbers. The +/ signs indicate if Associated servers are enabled + or disabledTacacs server summary Displays the TACACS+ shared secrets passwords for specified Tacacs sholog This example displays a TACACS+ debug log file Tacacs stats Were received when AI232 attempted to read them from Displays the number of errors that occurred when AI232When AI232 attempted to read a packet from the TACACS+ Server that had a sequence number that was out of order Specifies that a line number value will be entered This command displays the last few lines of a fileTail This example displays the last 20 lines of file log.txt Default is Tcpoutconn Telnet This example changes the telnet port to port Uploads a file to the Tftp server TftpDownloads a file from the Tftp server Defines the IP address of the Tftp server to which the file Source file Defines the name of the source file after it has beenFile name is specified, the file will have the same name as Special characters Tftpboot 113 Timezone 115 Displays text from the file one page at a time Defines the file for which you want to view the contentsType Update Defines the source file to copy Uptime Useradd Profilename Permission Destination at login. The destination is specified when Specifies a user who can login into AI232 and accessRetrieve status or to change the configuration Permission is assigned Userdel Users Who Xon-interval Is 1 to 120 seconds AI232 Crash Codes This appendix provides information about AI232 crash codes Common Crash Codes Error Code Description Hexadecimal DecimalCrash Codes AI232 Crash Codes System Failure Crash Reports Kentrox Technical Support AI232 Version 9.6x User’s Guide Standalone Mode and Switch Mode At the FTP prompt, open AI232 Standalone ModeDownloading Software for a Standalone AI232 Transfer the software image to AI232 Configuring BOOTP/TFTP At the FTP prompt, open AI198 Switch ModeDownloading Software for AI232 in Switch Mode Transfer the software image to AI198 Winslc baseport update AI232 Version 9.6x User’s Guide Commands for AI232 TACACS+ Server Enhancements AI232 Commands Following keyword lets users access destinations AI232 Menu Aliases Menu Menulink FTP Sessions Following AI232 keywords apply to FTP accessProvides FTP read access Acronym Meaning Command Line Interface Command and Control InterfaceChallenge-Handshake Authentication Protocol Border Gateway Protocol Domain Name Service Channel Service UnitDynamic Host Configuration Protocol Digital Service Unit Electrostatic Discharge File Transfer, Access, and ManagementEnd System End System to Intermediate System Link Access Protocol Balanced Integrated Services Digital NetworkInternet Service Provider Link State Update Operations, Administration, Maintenance, and Provisioning Nonservice AffectingNetwork Service Access Point Multimode Fiber Optic Cable Plain Old Telephone Service Password Authentication ProtocolPrivate ID or password QoS Quality of Service Service Advertisement Protocol Remote Network Monitoring SpecificationSerial Alarm Module Switching Center Control System TID Address Resolution Protocol Switched Virtual ConnectionTerminal Access Controller Access System Time Division Multiple Access Unshielded Twisted Pair XML Key Management SpecificationXerox Network Services Virtual Channel