Security 10-5

You can toggle the default user privileges for each user. The defaults are set to minimize the possibility of an individual user inadvertently damaging the WAN connection. Exercise caution in assigning privileges other than these defaults to limited users.

Access Privilege

Default

 

 

 

 

WAN Data Configuration

No

 

 

Connection Profile Configuration

No

 

 

Circuit (PVC/DLCI) Configuration

No

 

 

LAN Data Configuration

Yes

 

 

LAN Subnet Configuration

Yes

 

 

NAT/Filters Configuration

Yes

 

 

Preferences (Global) Configuration

Yes

 

 

Advanced Security Options

The Advanced Security Options screen allows you to configure the global access privileges of users authenticated via a RADIUS server or a TACACS+ server.

From the Security Options screen, select Advanced Security Options. The Advanced Security Options screen appears.

Advanced Security Options

 

 

+---------------------------

+

 

+---------------------------

+

Remote Authentication...

RADIUS

Security Databases...

TACACS+

Remote Server Addr/Name:

+---------------------------

+

Remote Server Secret:

 

 

Alt Remote Server Addr/Name:

 

 

Alt Remote Server Secret:

 

 

RADIUS Identifier:

 

 

RADIUS Server Authentication Port: 1812

 

Remote Access Privileges...

Custom

 

Telnet Server Port:

23

 

MAC Address Authentication...

 

 

LAN (Ethernet) IP Filter Set...

 

 

Remove Filter Set

 

 

Select RADIUS or TACACS+ from the pop-up menu. Configuration information is given in the following sections:

“RADIUS server authentication” on page 10-6

Page 279
Image 279
Motorola Enterprise Series Routers, 6161252-00-01 manual Advanced Security Options, Radius, Tacacs+