13: User Authentication
EMG™ Edge Management Gateway User Guide
243
3. To disable a method currently in the
Enabled methods
list, select the method and click the
right
arrow between the lists.
4. To set the order in which the EMG unit will authenticate users, use the up
and down
arrows to the left of the
Enabled methods
list.
5. For
Attempt next method on authentication rejection
, you have the following options:
-
To enable the EMG to use all methods, in order of precedence, until it obtains a
successful authentication, select the check box. This is the default.
-
To enable the EMG unit to use only the first authentication method that responds (in case
a server is down or unavailable), clear the check box.
Note:
When limiting accessibility of the sysadmin login to the physical EMG
console manager device, make sure to uncheck
Attempt next method on
authentication rejection
.
6. Click
Apply
.
Now that you have enabled one or more authentication methods, you must configure them.
Authentication Commands
Go to
to view CLI commands which correspond to the web page
entries described above.
User Rights
The EMG has three user groups: Administrators, Power Users, and Default Users. Each has a
predefined set of rights; users inherit rights from the user group to which they belong. These rights
are in addition to the current functions that a user can perform at the command line interface:
connect direct/listen
set locallog/password/history/cli
show datetime/deviceport/locallog/portstatus/portcounters/
history/cli/user
The table below shows the mapping of groups and user rights.
(Terminal Access
Controller Access Control
System)
allows a remote access server to communicate with an
authentication server to determine whether the user has access to the network.
is a completely new protocol and is not compatible with TACACS or
XTACACS. The EMG supports only.
Local Users
Local accounts on the EMG unit used to authenticate users who log in using
SSH, Telnet, the web, or the console port.
