Motorola BSR 2000, Configuration And Management Manual

Page: 101 / 650

Release 1.0 Configuring the System
526360-001-00 Rev. B MGBI 3-51
■
Authentication is a service that determines who the user is and whether they are
allowed access to the BSR.
■
Authorization is a service that determines what tasks the user is allowed to do on
the BSR.
■
Accounting is a service that collects data related to resource usage.
In large enterprise networks, the task of administering security on every individual
device is resource intensive. provides the means to remotely manage
network security from one server. The network administrator provides the
BSR with the IP address or hostname of the server. The client
runs on the BSR and interacts with the
server to:
■
Authenticate each user before allowing access to the management console.
■
Perform authorization when a user attempts to run a command or access a
privilege level.
■
Provide an accounting of resource usage.
Configuring on the BSR involves the following tasks:
■
Configuring Servers
■
Enabling AAA
■
Configuring AAA Authentication
■
Configuring AAA Authorization
■
Configuring AAA Accounting
Configuring Servers
The tacacs-server host command specifies the names of the IP host or hosts
maintaining a server. The following additional options can also be
configured for servers:
■
Specifying a Global Encryption Key - A global encryption key is used to encrypt
all traffic between all BSR client and the server to provide
security.
■
Specifying a Global Port Number - A global port number specifies one port that
will be used for all communication between the server and the
client. This is a the TCP/IP port (socket on which server
listens). When connecting to this server, the BSR should open the use
this destination port.