Cisco CISCOWORKS COMMON SERVICES 3.0, Руководство пользователя

Страница: 81 / 286

3-35
User Guide for CiscoWorks Common Services
78-16571-01
Chapter 3 Configuring the Server
Setting the Login Module to ACS
Understanding Fallback Options for Non-ACS mode
Fallback options allow you to access the software if the login module fails, or you
accidentally lock yourself or others. There are three login module fallback
options. These are available on all platforms. The
Table 3-2 gives details:
Setting the Login Module to ACS
The Login Module determines the type of authentication and authorization
Common Services uses. By default, the login module is set to local authentication
and authorization.
You can change this default value to use Cisco Secure ACS for user
authentication and authorization.
When you change login module to ACS ensure that:
•
The CiscoWorks Server is added as an AAA client in the ACS server. For the
first time, it can be done at the Network Configuration UI in ACS server. You
can add the host (with IP Address), and configure the secret key there.
The same secret key should be entered in the AAA Mode Setup dialog box.
•
The username you enter while logging in to CiscoWorks is a valid ACS user
name. In ACS mode, authentication takes place from the ACS server.
Table 3-2 Login Module Fallback Options
Option Description
Allow all CiscoWorks Local users to
fall back to the CiscoWorks Local
login. All users can access CiscoWorks using
the Local login if the current login
module fails.
Allow only the following user(s) to fall
back to the CiscoWorks Local login if
preceding login fails: username. Specified users can access CiscoWorks
using the Local login if the current
login module fails. Use commas
between user names.
Allow no fall backs to the CiscoWorks
Local login. No access is allowed if the current
login module fails.