Avocent Cyclades ACS 5000 SERIES, Command Reference Manual, Page: 51 / 152

Chapter 3: Security 43
6. Save your changes.
# saveconf
LDAP Authentication
To configue LDAP authentication on the console server:
1. Execute the following command. Refer to Table 3.6 for authentication parameters.
cli> config security authentication [parameter] <value>
2. Activate and save your configuration.
Group Authorization
This feature enables the group information retrieval from the authentication servers ,
RADIUS and LDAP. It adds another layer of security by adding a network-based authorization. It
retrieves the group information from the authentication server and performs an authorization
through the console server.
authorization on serial ports
By enabling the raccess parameter, administrators implement an additional level of security
checking. After each user is successfully authenticated through the standard login procedure, the
console server uses to authorize user access to specific serial ports.
By default, the raccess parameter is disabled. When enabled, users are denied access unless they
have the proper authorization, which must be set on the server itself.
To configure authorization on serial ports:
1. Enable raccess authorization parameter.
cli> config security authentication tacplusraccess [yes|no]
2. Configure serial ports for user or group access.
cli> config physicalports <'all' or range/list[1-xx]> access users/
groups <list of users or group names separated by commas>
3. Activate and save your configuration.
Table 3.6: LDAP Authentication Parameters
Parameter Value Description
ldapbasedomain <ldapbasedomain> Distinguished name of the search base. dc=cyclades,dc=com
ldapserver <n.n.n.n> LDAP server IP address or name.
secureldap yes|no To use secure LDAP.