Dell Brocade DCX, Руководство по настройке

Страница: 153 / 1436

BigIron RX Series Configuration Guide 81
53-1001810-01
Configuring TACACS/ security
4
NOTE
By default, a user logging into the device through Telnet or SSH would first enter the User EXEC level.
The user can enter the enable command to get to the Privileged EXEC level.
A user that is successfully authenticated can be automatically placed at the Privileged EXEC level
after login. Refer to
“Entering privileged EXEC mode after a Telnet or SSH login” on page 89.
TACACS authentication
NOTE
Also, multiple challenges are supported for login authentication.
When TACACS authentication takes place, the following events occur.
1. A user attempts to gain access to the device by doing one of the following:
•
Logging into the device using Telnet, SSH, or the Web management interface
•
Entering the Privileged EXEC level or CONFIG level of the CLI
2. The user is prompted for a username and password.
3. The user enters a username and password.
4. The device sends a request containing the username and password to the TACACS server.
5. The username and password are validated in the TACACS server’s database.
6. If the password is valid, the user is authenticated.
authentication
When authentication takes place, the following events occur.
1. A user attempts to gain access to the device by doing one of the following:
•
Logging into the device using Telnet, SSH, or the Web management interface
•
Entering the Privileged EXEC level or CONFIG level of the CLI
2. The user is prompted for a username.
3. The user enters a username.
4. The device obtains a password prompt from a server.
5. The user is prompted for a password.
6. The user enters a password.
7. The device sends the password to the server.
8. The password is validated in the server’s database.
9. If the password is valid, the user is authenticated.
authorization
The device supports two kinds of authorization:
•
Exec authorization determines a user’s privilege level when they are authenticated.