User authentication
Terminal Access Controller Access-Control System Plus (TACACS+)
Digi Connect EZ Mini User Guide
442
is a member of. For example, in
, the group attribute in the sample
tac_plus.conf file is
groupname
, which is also the default setting for the group_attribute in the
Connect EZ configuration.
(config)> auth tacacs+ group_attribute
attribute-name
(config)>
5. (Optional) Configure the type of service. This is the value of the
service
attribute in the the
TACACS+ server's configuration. For example, in
, the value of the
service
attribute in the sample tac_plus.conf file is
system
, which is also the default setting in
the Connect EZ configuration.
(config)> auth tacacs+ service
service-name
(config)>
6. (Optional) Enable command authorization, which instructs the device to communicate with the
TACACS+ server to determine if the user is authorized to execute a specific command. Only the
first configured TACACS+ server will be used for command authorization.
(config)> auth tacacs+ command_authorization true
(config)>
7. (Optional) Enable command accounting, which instructs the device to communicate with the
TACACS+ server to log commands that the user executes. Only the first configured TACACS+
server will be used for command accounting.
(config)> auth tacacs+ command_accounting true
(config)>
8. Add a TACACS+ server:
a. Add the server:
(config)> add auth tacacs+ server end
(config auth tacacs+ server 0)>
b. Enter the TACACS+ server's IP address or hostname:
(config auth tacacs+ server 0)> hostname
hostname|ip-address
(config auth tacacs+ server 0)>
c. (Optional) Change the default port setting to the appropriate port:
(config auth tacacs+ server 0)> port
port
(config auth tacacs+ server 0)>
d. (Optional) Repeat the above steps to add additional TACACS+ servers.
9. Add TACACS+ to the authentication methods. Authentication methods are attempted in the
order they are listed until the first successful authentication result is returned. This example
will add TACACS+ to the end of the list. See
for information about
adding methods to the beginning or middle of the list.
