OPTICAL SYSTEMS DESIGN
DOC ID: 10118101
OSD2512 OPERATOR MANUAL
PAGE 67
Methods that involves remote servers are timed out if the remote servers are offline. In this
case the next method is tried. Each method is tried from left to right and continues until a
method either approves or rejects a user. If a remote server is used for primary authentication
it is recommended to configure secondary authentication as 'local'. This will enable the
management client to login via the local user database if none of the configured authentication
servers are alive.
COMMAND AUTHORIZATION METHOD CONFIGURATION HELP
The command authorization section allows you to limit the CLI commands available
to a user.
The table has one row for each client type and a number of columns, which are:
Client
The management client for which the configuration below applies.
Method
Method can be set to one of the following values:
No: Command authorization is disabled. User is granted access to CLI commands
according to his privilege level.
Tacacs: Use remote server(s) for command authorization. If all remote
servers are offline, the user is granted access to CLI commands according to his
privilege level.
Cmd Lvl
Authorize all commands with a privilege level higher than or equal to this level.
Valid values are in the range 0 to 15.
Cfg Cmd
Also authorize configuration commands.
ACCOUNTING METHOD CONFIGURATION HELP
The accounting section allows you to configure command and exec (login)
accounting.
The table has one row for each client type and a number of columns, which are:
Client
The management client for which the configuration below applies.
Method
Method can be set to one of the following values:
No: Accounting is disabled.
Tacacs: Use remote server(s) for accounting.
Cmd Lvl
Enable accounting of all commands with a privilege level higher than or equal to this level.
Valid values are in the range 0 to 15. Leave the field empty to disable command accounting.
