Chapter 29: Security
STANDARD Revision 1.0
C4® CMTS Release 8.3 User Guide
© 2016 ARRIS Enterprises LLC. All Rights Reserved.
849
4.
To configure authentication method list(s), enter
configure authentication <list_name> tacacs group <group_name> local
Note: The none parameter should not be used when configuring authentication lists due to the resulting lack of security.
5.
To configure a console or telnet session for authenticating the method list:
configure line vty <int> authentication <list_name> login-authentication enable-authentication
configure line console <0|1> authentication <list_name> login-authentication enable-
authentication
Use the following command to configure accounting method lists:
configure accounting listName [local] [tacacs {groupName | default}] [no]
As with authentication and authorization, the keywords specifying accounting methods may appear in any order, and they
may be repeated. The order of keywords specifying accounting methods is significant in that method n+1 is employed if
method n is unavailable.
The following commands are valid examples:
configure accounting list1 <method>
Where:
<method>
can be: none, local, tacacs <group>
Note: The none parameter should not be used when configuring authentication lists due to the resulting lack of security.
configure accounting list2 tacacs group2
They define two accounting method lists: list1 and list2. The first list forwards accounting records to the default
group or to the local log if the default group is unavailable. The second list forwards accounting records to
group2.
Use the following command to configure lines, either consoles or virtual terminals (VTYs):
configure line {console | vty} startLine [<endLine>] [session-timeout <integer>] [idle-timeout
<integer>] [length <integer>] [password [hidden] <string>] ] [speed <integer>] [authentication
[login | enable] <authenticationList>] [authorization <authorizationList>] [accounting {shell |
command <integer>} [stop-only] <accountingList>] [no]
Since the C4/c CMTS currently supports a single console port and up to sixteen remote sessions, the commands shown in
the table below are possible: