Avocent Cyclades ACS Service Manual download pdf (Page 51)

Chapter 3: Security 43

6. Save your changes.

# saveconf

LDAP Authentication

To configue LDAP authentication on the console server:

1. Execute the following command. Refer to Table 3.6 for authentication parameters.

cli> config security authentication [parameter] <value>

2. Activate and save your configuration.

Group Authorization

This feature enables the group information retrieval from the authentication servers TACACS+,

RADIUS and LDAP. It adds another layer of security by adding a network-based authorization. It

retrieves the group information from the authentication server and performs an authorization

through the console server.

TACACS+ authorization on serial ports

By enabling the raccess parameter, administrators implement an additional level of security

checking. After each user is successfully authenticated through the standard login procedure, the

console server uses TACACS+ to authorize user access to specific serial ports.

By default, the raccess parameter is disabled. When enabled, users are denied access unless they

have the proper authorization, which must be set on the TACACS+ server itself.

To configure TACACS+ authorization on serial ports:

1. Enable raccess authorization parameter.

cli> config security authentication tacplusraccess [yes|no]

2. Configure serial ports for user or group access.

cli> config physicalports <'all' or range/list[1-xx]> access users/

groups <list of users or group names separated by commas>

3. Activate and save your configuration.

Table 3.6: LDAP Authentication Parameters

Parameter Value Description

ldapbasedomain <ldapbasedomain> Distinguished name of the search base. dc=cyclades,dc=com

ldapserver <n.n.n.n> LDAP server IP address or name.

secureldap yes|no To use secure LDAP.

1 2 ... 46 47 48 49 50 51 52 53 54 55 56 ... 151 152

No comments

Avocent Cyclades ACS Service Manual Page 51