Dell PowerConnect W-Airwave, Руководство пользователя

Страница: 50 / 310

50 | Configuring AMP Dell PowerConnect W-AirWave 7.4 | User Guide
3. Select Save and continue with additional steps.
4. To configure Cisco ACS to work with AirWave, you must define a new service named AMP that uses https on
the ACS server.

The AMP https service is added to the (Cisco) interface under the Interface Configuration
tab.

Select a checkbox for a new service.

Enter AMP in the service column and https in the protocol column.

Select Save.
5. Edit the existing groups or users in TACACS to use the “AMP service” and define a role for the group or user.

The role defined on the Group Setup page in ACS must match the exact name of the role defined on the
AMP Setup > Roles page.

The defined role should use the following format:
role=<name_of_AMP_role>
. One example is as
follows:
role=DormMonitoring
As with routers and switches, AirWave does not need to know usernames.
6. AirWave also needs to be configured as an AAA client.

On the Network Configuration page, select Add Entry.

Enter the IP address of AirWave as the AAA Client IP Address.

The secret should be the same value that was entered on the
AMP
Setup > page.
7. Select (Cisco IOS) in the Authenticate Using drop down menu and select restart.
What Next?

Go to additional tabs in the AMP Setup section to continue additional setup configurations.

Complete the required configurations in this chapter before proceeding. AirWave support remains available to
you for any phase of AirWave installation.
Configuring RADIUS Authentication and Authorization
For RADIUS capability, you must configure the IP/Hostname of the RADIUS server, the TCP port, and the
server shared secret. Perform these steps to configuration RADIUS authentication:
Primary Server Port 49 Enter the port for the primary server.
Primary Server Secret N/A Specify and confirm the primary shared secret for the primary
server.
Secondary Server Hostname/IP
Address N/A Enter the IP address or hostname of the secondary server.
Secondary Server Port 49 Enter the port for the secondary server.
Secondary Server Secret N/A Enter the shared secret for the secondary server.
Table 24
AMP Setup > Authentication Fields and Default Values (Continued)
Field Default Description
NOTE: AirWave checks the local username and password store before checking with the server. If the user is found
locally, the local password and local role apply. When using TACAS+, it is not necessary or recommended to define users on the
AirWave server. The only recommended user is the backup administrator, in the event that the TACAS+ server goes down.