General DataComm SpectraComm IP T1, Руководство по установке и эксплуатации

Страница: 76 / 120

Additional Features Authentication Protocol
5-2 SpectraComm IP T1 Router Card 076R200-000
Installation and Operation Manual Issue 13
Authentication Protocol
In addition to local authentication where the usernames and passwords reside on each individual
SCIP device, SCIP can be configured for authentication. This capability supports the
CISCO protocol for authentication between the SCIP device and the server.
When is enabled, the server becomes the central point for managing
network-wide usernames and passwords. This is especially useful when provisioning SCIP devices
in large networks.
usernames and passwords are authenticated for all access methods: craft, Telnet, and
HTTP. You must be logged in with ADMIN privileges to access SCIP’s commands.
Detailed information and configuration procedures are provided in the paragraphs below.
• For help in setting parameters, type:
configure ?
• To show the status of , type:
show
Figure 5-1 Help and Status Displays for
_________Help for “configur “_____________
account Accounting enable/disable (not supported yet)
authen Authentication enable/disable
author Authorization enable/disable (not supported yet)
attempts Set max number of attempts to login; requires 1 parameter(s)
banner Optional message when starting /local authentication
console Enable/disable console user authentication
admin Define username for Admin password; requires 1 parameter(s)
suprv Define username for Supervisor password; requires 1 parameter(s)
en-pass Allow use of for “enable” password
fallback Enable/Disable fallback to local authorization
server Specify Server IP address
key Set default encryption key; requires 1 parameter(s)
timeout Default timeout for Server to reply; requires 1 parameter(s)
testing Authentication testing
Parameters
-----------------------------------------------------------------
Authentication is disabled.
Console Authentication is disabled.
Server IP: 172.016.010.162
default key: tacacs_test
default timeout: 5
max attempts: 3
admin username: $gdc_scip_admin$
supv username: $gdc_scip_supervisor
en-pass state: disabled
fallback state: enabled
banner: SCIP using Authentication
local banner: SCIP using local authentication$