Manuals / Kentrox / Computer Equipment / Network Card

Kentrox AI232 manual Tacacs server phase

Models: AI232

1 322

Download 322 pages 30.19 Kb

Page 270

AI232 Version 9.6x User’s Guide

AI232 Commands: tacacs server phase

tacacs server phase

Description

This command configures the AAA phases that are allowed for specified TACACS+ servers.

Command Type

shell

Formats

tacacs server phase { server_range * } { disable enable }

{account all authen author }

Parameters

server_range	Specifies a server number or range of server numbers. Valid
	values are 1 to 9. Individual values are separated by commas (,)
	and hyphens (-). For example, 1,4-6specifies servers 1, 4, 5, and
	6.
*	Specifies all TACACS+ servers.
disable	Disables the specified AAA phases for the specified TACACS+
	servers.
enable	Enables the specified AAA phases for the specified TACACS+
	servers.
account	Enables or disables the accounting phase for the specified
	TACACS+ servers.
all	Enables or disables all AAA phases for the specified TACACS+
	servers.
authen	Enables or disables the authentication phase for the specified
	TACACS+ servers.
author	Enables or disables the authorization phase for the specified
	TACACS+ servers.

Command Defaults

All phases

8-98

Image 270

Kentrox AI232 manual Tacacs server phase

Contents

AI232 Port High Speed Asynchronous Line Card User’s Guide Page About this Document Document Conventions Tip Laser DangerElectrostatic Discharge Caution Ground Caution Proper Cooling CautionFCC Warning Email Support Customer AssistanceWeb Site Support Phone SupportTable of Contents System Configuration Link Configuration Diagnostics for TID Multiplexing TID MultiplexingTOC-5 AI232 Commands AI232 Menu Aliases FTP Sessions Appendix a AI232 Crash CodesProduct Description Features Standalone Configuration System DiagnosticsAI232 Hardware Components Ports 9-16 Connector Ports 25-32 ConnectorPorts 17-24 Connector Ports 1-8 ConnectorTechnical Specifications Component DescriptionDistribution Panels Specifications for DP232-19/23Description Specification Model DP232-19/23Pin Assignments Signal DCDConnect to the AI232 Installation ProcedureModel DP232-RJ45 Ports PlacesSpecifications for DP232-RJ45 Pin SignalInstall the mounting flanges in the desired location Parts ListDescription Quantity Cable CAB467 Places DP232-RJ45 Typical Applications Asynchronous to TCP/IP ApplicationModem Multiplexer Application Illustrates a modem multiplexer applicationUsing the AI198 Menu System Accessing the Menu System Types of Menu Items Navigating the Menu SystemMenu Numbering Structure SubmenusToggles DataMenu re-appears with the entered IP address Functions Menu Item DescriptionsMenu Item Description Exiting the Menu System AI232 Local Menu System TACACS+ Authentication Multilevel User Name and Password SecurityRadius Authentication Identifying AI232 Menu System Security OptionsPPP Authentication Protocols PAP and Chap Using a Telnet Connection for Login Logging Into AI232Using an Asynchronous Port for Login Consecutive failed login attemptsNumber of consecutive failed login attempts Accessing the Local Menu System Data Entry Items Navigating the Local Menu SystemIdentifying Types of Menu Items Direction KeysToggle Items Accessing the Help Menu SendExiting the Local Menu System Save the changesAI232 Version 9.6x User’s Guide System Configuration Description General System Properties ConfigurationDestination Menu Break Sequence FormatConfiguration in the AI198 Menu System Menu Item TypeEthernet Port Settings Configuration in the AI232 Local Menu SystemToggle for both menu items FTP Port This menu item sets the FTP server port numberIP Settings This example displays 16 FTP port number set toMenu Item Types Access the System Menu System PromptThis item sets the system prompt value in the CLI TCP Settings ToggleTo on Telnet Port This item sets the Telnet port value for AI232This example displays Telnet Port set to Radius Configuration Server SettingsEnabled To configure the shell/FTP Radius option Access Menu FALLBACK. The default is DisabledShell/FTP Options Enabled TACACS+ Configuration Shell/FTP Options 00049 Snmp Configuration Authentication TrapsAI232 Local Menu Item Configuration Community Names Data for all menu itemsFollowing example displays WriteComm MenuContact Persons Node InformationSnmp Manager 10.65.32.4 Static Route Configuration IP Address SettingsTID to Modem Mux Configuration Inactivity TimeoutFollowing are available This example displays Inactivity Timeout set to Initialization StringPort Bit Settings This example displays Init String set to conn23Toggle for all menu items TID to Route AI232 Local Menu Item Configuration Time Configuration Daylight Savings TimeSntp Settings SettingsAccess the Time Menu located under the System Menu Time Zone This following example displaysAI232 Version 9.6x User’s Guide Link Configuration Asynchronous AI232 has 3 configurable link typesAI232 Link Types Asynchronous PPPModem Multiplexer Alias Connect Options ConfigurationAccess Menu For 02 Alias, enter 2, and the alias name Link Type AvailabilityCall Retry Interval This example displays 02 Alias set to async.4.1Connect String This example displays 03 Call retry interval set to00134 Default is OFF Connection SettingsConnection settings are configured using three menu items Is on00030 Link Application Login Disconnect Options Configuration Disconnect Inactivity Timer SettingsDisconnect inactivity timer when the link receives a call Select on or OFF. The default is on This example displays Off. The default is On This example displaysIs Off Disconnect Settings Disconnect settings are configured using two menu itemsDefault is on Disconnect String Disconnect General Link Properties Configuration Auto Disable Error LimitAsync, AsyncPPP, and ModMux Flow Control This example displays SW Flow Control set to XonXoff Access the Link MenuLink Description This menu item defines a description for a linkLink Number This menu item enables or disables a link Link StateThis example displays 01 Link number set to This example displays Link state set to Disabled Link TypePort Data Bits Async and AsyncPPPPort Parity This example displays Port data bits set to SevenThis menu item defines the baud rate for a port Port SpeedThis example displays Port parity set to Odd Data in the AI232 local menu systemMenu 4.2.14.12.5 appears Port Stop Bits Xon Repeat Interval This example displays 10 Xon Repeat interval set to Following menu items are available for PPP configuration General PPP Properties ConfigurationIpcp Address Settings AsyncPPP and ModMuxIpcp Address Parameters Maximum Unit Settings Set toNetwork Control Protocol For an Ipcp network control protocolIpcp Modem Option Configuration Modem StringDialing Time-out Interval Number of Dial Attempts This example displays Dialing time-outset toModem Setup Menu This example displays Number of dial attempts set toPPP Authentication Configuration Local Authentication SettingsPAP RAS Option This example displays RAS Option set to RADIUS/Fallback Remote Authentication Settings Chap RTS/DTR Lead Control Configuration DTR State ConfigurationRTS State Configuration Flow Control DTR connect state Off DTR disconnect state TID Multiplexing Overview AI232 Version 9.6x User’s Guide TID Multiplexing Configuration Configuring the Parent AliasMenu appears Values are 1 to Destination Configuring the Children Aliases TidforAI232 Defines the terminal identifier for AI232During the parent alias configuration TIDtid Example Configurations For Alias name, enterSecond child connection YES Alias Edit Menu Alias Name 172.16.30.61#6001 PARENT1.1 Alias Edit Menu Alias Name Normal Response Format TID Multiplexing TroubleshootingParameters Response Item DescriptionError Response Format Normal Response ExampleDiagnostics for TID Multiplexing Error Response ExampleErrcde AI232 Version 9.6x User’s Guide Alias and Call Routing Configuration AI232 Card B IP address DownstreamIncoming Outgoing Asynchronous TCP/IP CallCall UpstreamAI232 Version 9.6x User’s Guide Configuring an Alias Configuring an Alias in the AI198 Menu SystemCall Routing AI232 Version 9.6x User’s Guide AI232 Version 9.6x User’s Guide Configuring an Alias in the AI232 Menu System For Display Alias in Destination Menu, select Yes or No Source/Destination Protocol Tables Source Destination Menu Item Information SourceMenu Item Information Async with TCP/IP Source Without Telnet Breaks AI198TCP/IP Source With Telnet Breaks AI198 Async breakTelnet break Example asy.3 Asynchronous Source Without Breaks AI232Asynchronous Source With Breaks AI232 TCP/IP Source Without Telnet Breaks AI232TCP/IP Source With Telnet Breaks AI232 Protocol Processing Modules Module TypesReturn followed by a line feed To zero, this option is turned off Specify up to 16 charactersCharacters. The packet module accepts only one -S parameter Feed and delete Provides TL1 packetizing and sets the packetizing timer toSeconds Provides TL1 packetizing and prevents breaks from passingPropagated upstream Echo 1 when the connection is initiated. Initiates will SGAProvides Telnet handling, but prevents breaks from being Echo and will SGAStart Symbols Alias MacrosAlias Macro Components Variables CommentsConstants Variable ValueWildcard Symbols OperatorsOperator Description Alias Macro Function Description of Operation Returns the entire string Match any of the expressions, then default isGreater than the length of string, the function Returns the length of stringAlias Macro Configuration Configuration Examples=LA,PA,’#’,1-1=MYIP1 AI232 Version 9.6x User’s Guide AI232 Commands Shell Connections Commands OverviewShell Commands Establishing a Local Shell ConnectionWinslc Commands Displaying winslc Command LoggingEstablishing a Remote Shell Connection Using winslc Commands Log/Alarm Message HeaderHeader Element Description Specifies the message severity level Introduces the log/alarm messageSpecifies the current date Specifies the line card baseport numberAaa account Command TypeCommand Defaults FormatsAaa authen Enables TACACS+ authenticationDisables TACACS+ authentication ConnectionsAaa author Priv-lvlAaa chpass Enabled TACACS+ fallback Aaa fallbackThis example displays the disabling of TACACS+ fallback Enables TACACS+ authentication with fallback Disables TACACS+ authenticationEnables TACACS+ authentication with no fallback Disabled all linksProfile. Individual values are separated by commas , No associations configuredAaa profile Specifies the name of an existing profileAaa profile 2 newprof1 Aaa retry Made. Valid values are 1 toConnection attempt Aaa stats Display Item DescriptionAuthorization instead of the TACACS+ server Displays the number of TACACS+ authorizationDisplays the number of failed TACACS+ authorization Where AI232’s system log was used for accountingAaa summary Per-command based on per-command request/reply handling Displays the status of FTP access as AAA TACACS+Displays the TACACS+ authorization method for the AI232 Displays the TACACS+ accounting status of user login eventsResets the timeout value to its default Aaa timeoutTACACS+ server when a connection attempt is made. Valid Values are 1 toAlarm Command Type shell FormatsThis example displays all system alarms in group links This example displays alarms for links 5-8in group links This example displays all alarms by severity levelThis example displays the unmasking of alarm group links Command Types ArpColumn Description 172.16.30.117 Break 232break 10.40.5.11#1821 Breaking connection 10.40.5.11#1821 Reset error counters for links 1 CresetTo reset error counters for links 1, 2, Example, 1,2-3 to reset error counters for links 1, 2,Date Debug This example displays the enabling of all debug data logging Filename Defines the name of the file to delete This command deletes a specified file that resides on AI232Delete This example displays the deletion of file log.txtDiag-conn Pattern 1, Logic 2, and Pattern 3 are evaluated before This option prompts for the ID of the connection to viewDisplays details for that connection Logic 4 and Pattern 5 are consideredUsing Interpretation Mode Diag-ethUsing the Help Option Deletes a filter Following formats apply to filtersAdds a filter Defines the source address MAC, IP, or TCP/UDPAdds or deletes a specific protocol filter. Available MAC/IP address settingsDefines the TCP/UDP port number regardless Protocol filters areThis example displays Ethernet diagnostic help information Ijkl FF FC This example displays the deletion of filter protocol tcp This example displays the deletion of all filtersDiag-info Displays the number of free or available Streams resources Last resetDisplays the name of the Streams resource DisplayDisplays the state of the driver. Two states are available Connection to be enabledDisplays the link number Specifies that the link is not establishedReceived packets Had CRC errorsDisplays the number of frame length violations Displays the number of short received framesDisplays the number of bytes received on Displays the number of frames received onConnection Displays the number of times transmitted framesDisplays the number of frames received on the connection Does not indicate an errorDisplays the number of transmit errors that have occurred Displays the number of bytes received on the connectionExcessive deferral timer is exceeded. An excessive deferral ErrorsDisplays the number of alignment errors Error is recorded when the following events occurFollowing values may appear Ethernet interface needs to be resetDisplays the current state of the Ethernet interface. Ethernet interface is uninitializedDiag-line Option FunctionDiag-line Only present in data packets, then the data byte count is Displayed as Ascii StringDiag-tconn Baseport Defines the baseport number for AI232Dir This example displays all available filesExit This example displays an exit from the current shell sessionHead This command displays the first few lines of a fileDefines the number of lines to display. The default is Defines the name of the file to displayThis example displays a list of all available commands This example displays help information for command showHelp This command displays the current user name and profile Formats ExamplesThis example displays the current user name and profile This example displays the configured IP address information Ip init Enter IP Address Range default 1 Setting range to 232 Link Enables the serial linksDisables the serial links Restarts the serial linksThis example displays the starting of links 1 through 4 This example displays the stopping of links 6This command turns the display of log messages on or off LogThis command closes a shell session LogoutThis example displays the closing of a shell session This command displays a list of available files This command accesses the AI232 main menu system MenuThis example displays the AI232 Main Menu Modmux Displays the phone number that was dialed More 232more log.txtWinslc This command forces AI232 to crash dump and haltPanic Baseport Defines the AI232 baseport numberThis command changes an existing user’s password PasswdPing Pppstatus Displays one of the following IP address of AI232 if the link status is RunningProfile Adds write permission for a command that otherwise would Adds commands to a profile and optionally adds writeDefines the name of a command to associate with a user Deletes commands from a user profilePvclist This example displays PVC information for linkColumn Description Reset This command resets AI232This example displays the resetting of AI232 Ipaddress Defines the IP address of the default router RouterUsage Notes Selcnf Configuration fileSpecifies the option that deletes a configuration file ExtensionPDisplays the content of the file one page at a time ShologShow Displays the version number of AI232 Displays the default and backup gateway IP addressDisplays the IP address, subnet mask, and high IP address Displays the date and timeThis command displays the status of the EIA leads StaeiaLead is negated DCD This example displays the current standalone mode status StandaloneStaslc Displays the number of framing errors Is asserted and means the signal is negatedDisplays the number of parity errors Displays the number of overrun errorsSyncflash Tacacs info Tacacs server Defines the server IP address Tacacs server ipSpecifies a server number or range of server numbers. Valid 0.0Tacacs server phase Tacacs server phase 1-5,8 disable account Values are 1 through Tacacs server portDefines the TCP port number for the TACACS+ servers. Valid TCP portNo secret configured Tacacs server secretAssociated servers are enabled + or disabled Tacacs server summaryDisplays the server numbers. The +/ signs indicate if Displays the TACACS+ shared secrets passwords for specified Tacacs sholog This example displays a TACACS+ debug log fileTacacs stats Were received when AI232 attempted to read them from Displays the number of errors that occurred when AI232When AI232 attempted to read a packet from the TACACS+ Server that had a sequence number that was out of orderSpecifies that a line number value will be entered This command displays the last few lines of a fileTail This example displays the last 20 lines of file log.txtDefault is TcpoutconnTelnet This example changes the telnet port to portUploads a file to the Tftp server TftpDownloads a file from the Tftp server Defines the IP address of the Tftp server to which the fileSource file Defines the name of the source file after it has beenFile name is specified, the file will have the same name as Special charactersTftpboot 113 Timezone 115 Defines the file for which you want to view the contents TypeDisplays text from the file one page at a time Update Defines the source file to copyUptime Useradd Profilename PermissionDestination at login. The destination is specified when Specifies a user who can login into AI232 and accessRetrieve status or to change the configuration Permission is assignedUserdel Users Who Xon-interval Is 1 to 120 secondsAI232 Crash Codes This appendix provides information about AI232 crash codesError Code Description Hexadecimal Decimal Crash CodesCommon Crash Codes AI232 Crash Codes System Failure Crash Reports Kentrox Technical Support AI232 Version 9.6x User’s Guide Standalone Mode and Switch Mode At the FTP prompt, open AI232 Standalone ModeDownloading Software for a Standalone AI232 Transfer the software image to AI232Configuring BOOTP/TFTP At the FTP prompt, open AI198 Switch ModeDownloading Software for AI232 in Switch Mode Transfer the software image to AI198Winslc baseport update AI232 Version 9.6x User’s Guide Commands for AI232 TACACS+ Server Enhancements AI232 Commands Following keyword lets users access destinationsAI232 Menu Aliases Menu MenulinkFollowing AI232 keywords apply to FTP access Provides FTP read accessFTP Sessions Acronym Meaning Command Line Interface Command and Control InterfaceChallenge-Handshake Authentication Protocol Border Gateway ProtocolDomain Name Service Channel Service UnitDynamic Host Configuration Protocol Digital Service UnitElectrostatic Discharge File Transfer, Access, and ManagementEnd System End System to Intermediate SystemLink Access Protocol Balanced Integrated Services Digital NetworkInternet Service Provider Link State UpdateOperations, Administration, Maintenance, and Provisioning Nonservice AffectingNetwork Service Access Point Multimode Fiber Optic CablePlain Old Telephone Service Password Authentication ProtocolPrivate ID or password QoS Quality of ServiceService Advertisement Protocol Remote Network Monitoring SpecificationSerial Alarm Module Switching Center Control SystemTID Address Resolution Protocol Switched Virtual ConnectionTerminal Access Controller Access System Time Division Multiple AccessUnshielded Twisted Pair XML Key Management SpecificationXerox Network Services Virtual Channel