Avocent Network Adapter EMS1000P Podręcznik Użytkownika Pobierz pdf (Strona 50)

Local authentication may be tried only if a remote authentication server is down (Remote_Method_Down_

Local).

An administrator can configure authentication using the CLI utility and the web manager. The default

authentication method for the console server and the serial ports is Local. Any authentication method that is

configured for the console server or the ports is used for authentication of any user who attempts to log in

through Telnet, SSH or the web manager.

Appliance authentication

The console server authenticates for the console server and the ports, either in groups or individually.

NOTE: It is advised when using group authorization that you use the same authentication for both the console server and all serial

ports, or use Single Sign-on Authentication to facilitate group authorization.

When Single Sign-on Authentication is disabled, the console server uses the individual configuration based in

the destination of the access: the console server itself or each serial port. Users must use their password each time

they access an individual port. If enabled, Single Sign-on Authentication will use the authentication server you

choose from the pull-down menu for all access and no further authentication will be needed.

NOTE: Selecting unconfigured from the pull-down menu will allow the ports to continue to use individual authentication servers, and

will require your password the first time you access any port. After that, the port will not require password authentication if Single Sign-

on Authentication is enabled.

To set authentication for the console server:

1. Click Authentication - Appliance Authentication.

2. Select the desired authentication server from the Authentication Type drop-down menu.

3. Select Enable fallback to Local type for root user in appliance console port when the remote authentication

fails and an administrator wants to access the appliance via console port as the root user.

4. Select Enable single sign-on to enable single sign-on authentication, and select the desired authentication

server from the Authentication Type drop-down menu.

5. Click Save.

Authentication servers

When using an authentication server, you must configure its IP address and in most cases other parameters before

it can be used. The following authentication servers require configuration: RADIUS, TACACS+, LDAP(S)|AD,

Kerberos, NIS and DSView 3 servers.

To configure a RADIUS authentication server:

1. Select Authentication - Authentication Servers - RADIUS.

2. Enter the IP addresses of the First Authentication Server and First Accounting Server.

3. If used, enter the IP addresses for the Second Authentication Server and Second Accounting Server.

4. Enter your secret word or passphrase in the Secret field (applies to both first and second authentication and

accounting servers), then re-enter the secret word or passphrase in the Confirm Secret field.

5. Enter the desired number of seconds for server time-out in the Timeout field.

42 Cyclades™ ACS 6000 Advanced Console Server

1 2 ... 45 46 47 48 49 50 51 52 53 54 55 ... 79 80

Brak uwag

Avocent Network Adapter EMS1000P Podręcznik Użytkownika Strona 50