214
1.877.877.2269
BLACKBOX.COM
NEED HELP?
LEAVE THE TECH TO US
LIVE 24/7
TECHNICAL
SUPPORT
1.877.877.2269
CHAPTER 10: AUTHENTICATION
FIGURE 10-6.
When setting the Framed-Filter-Id, the system may also remove the leading colon for an empty field. To work around this, add some
dummy text to the start of the string. For example:
dummy:group_name=testgroup1,users:
If no group is specified for a user—for example AmandaJones—then the user will have limited console access, with no user
interface or serial port access.
Default groups available on the console server include admin for administrator access and users for general user access.
TomFraser
Cleartext-Password := "FraTom70"
Framed-Filter-Id=":group_name=admin:"
AmandaJones Cleartext-Password := "JonAma83"
FredWhite
Cleartext-Password := "WhiFre62"
Framed-Filter-Id=":group_name=testgroup1,users:"
JanetLong
Cleartext-Password := "LonJan57"
Framed-Filter-Id=":group_name=admin:"
Additional local groups such as testgroup1 can be added via Users & Groups > Serial & Network.
10.1.8 REMOTE GROUPS WITH LDAP AUTHENTICATION
Unlike RADIUS, LDAP has built in support for group provisioning, which makes setting up remote groups easier. The console server
will retrieve a list of all the remote groups that the user is a direct member of, and compare their names with local groups on the
console server.
NOTE: Spaces in an LDAP group name will be converted to underscores.
