User authentication
Terminal Access Controller Access-Control System Plus (TACACS+)
Digi Connect EZ Mini User Guide
441
8. (Optional) Enable
Command authorization
, which instructs the device to communicate with
the TACACS+ server to determine if the user is authorized to execute a specific command. Only
the first configured TACACS+ server will be used for command authorization.
9. (Optional) Enable
Command accounting
, which instructs the device to communicate with the
TACACS+ server to log commands that the user executes. Only the first configured TACACS+
server will be used for command accounting.
10. Add TACACS+ to the authentication methods:
a. Click
Authentication
>
Methods
.
b. For
Add method
, click
.
c. Select
TACACS+
for the new method from the
Method
drop-down.
Authentication methods are attempted in the order they are listed until the first successful
authentication result is returned. See
Rearrange the position of authentication methods
for
information about rearranging the position of the methods in the list.
11. Click
Apply
to save the configuration and apply the change.
Command line
1. Log into the Connect EZ command line as a user with full Admin access rights.
Depending on your device configuration, you may be presented with an
Access selection
menu
. Type
admin
to access the Admin CLI.
2. At the command line, type
config
to enter configuration mode:
> config
(config)>
3. (Optional) Prevent other authentication methods from being used if TACACS+ authentication
fails. Other authentication methods will only be used if the TACACS+ server is unavailable.
(config)> auth tacacs+ authoritative true
(config)>
4. (Optional) Configure the group_attribute. This is the name of the attribute used in the TACACS+
server's configuration to identify the Connect EZ authentication group or groups that the user
