206
1.877.877.2269
BLACKBOX.COM
NEED HELP?
LEAVE THE TECH TO US
LIVE 24/7
TECHNICAL
SUPPORT
1.877.877.2269
CHAPTER 10: AUTHENTICATION
The console server platform is a dedicated Linux computer, and it embodies a myriad of popular and proven Linux software
modules for networking, secure access (OpenSSH), secure communications (OpenSSL) and sophisticated user authentication
(PAM, RADIUS, , Kerberos and LDAP).
FIGURE 10-1.
This chapter details how the Administrator can use the Management Console to establish remote AAA authentication for all
connections to the console server and attached serial and network host devices.
This chapter also covers establishing a secure link to the Management Console using HTTPS and using OpenSSL and OpenSSH for
establishing secure Administration connection to the console server.
10.1 AUTHENTICATION CONFIGURATION
Authentication can be performed locally, or remotely using an LDAP, Radius, Kerberos or authentication server. The
default authentication method for the console server is Local.
Any authentication method that is configured will be used for authentication of any user who attempts to log in through Telnet, SSH
or the Web Manager to the console server and any connected serial port or network host devices.
The console server can be configured to the default (Local) or an alternate authentication method (TACACS, RADIUS, LDAP or
Kerberos) with the option of a selected order in which local and remote authentication is to be used.
Local/TACACS/RADIUS/LDAP/Kerberos
Tries local authentication first, falling back to remote if local fails.
TACACS/RADIUS/LDAP/Kerberos Local
Tries remote authentication first, falling back to local if remote fails.
TACACS/RADIUS/LDAP/Kerberos Down/Local
Tries remote authentication first, falling back to local if the remote authentication returns an error condition (e.g., the remote
authentication server is down or inaccessible).
