AI232 Version 9.6x User’s Guide

AI232 Local Menu System: Identifying AI232 Menu System Security Options

Identifying AI232 Menu System Security Options

AI232 has a variety of security options, including:

zMultilevel User Name and Password Security

zRADIUS Authentication

zTACACS+ Authentication

zPPP Authentication Protocols (PAP and CHAP)

Multilevel User Name and Password Security

Up to 10 configurable user account profiles can be assigned to an AI232 user. Five system profiles are available for providing various levels of user access. For more information about user profiles, refer to command profile on page 1-103.

RADIUS Authentication

RADIUS authentication verifies user login information against valid user information in a database on a centralized RADIUS authentication server. A primary and secondary RADIUS server are configurable to provide secure access for an entire AI232 network. AI232 RADIUS authentication is available for Telnet, asynchronous, and synchronous ports. For more information on RADIUS authentication, refer to section RADIUS Configuration on page 1-19.

TACACS+ Authentication

TACACS+ authentication verifies user login information against the user’s permission level on a TACACS+ server. Up to 9 TACACS+ servers are configurable to provide secure access for an entire AI232 network. AI232 TACACS+ authentication is available for Telnet, asynchronous, and FTP connections. For more information on TACACS+ authentication and server configuration, refer to the following commands:

z aaa authen on page 8-7

z tacacs server on page 8-96

z aaa author on page 8-8

z tacacs server phase on page 8-98

z aaa fallback on page 8-10

z tacacs server ip on page 8-97

z

aaa timeout on page 8-19

z

tacacs server port on page 8-100

z

aaa ppp authen on page 8-11

z

tacacs server secret on page 8-101

3-2

Page 35 Page 37
Page 36
Image 36
Kentrox manual Identifying AI232 Menu System Security Options, Multilevel User Name and Password Security
Page 35 Page 37
Top Page Image Contents