SEVEN WR-Z16, Руководство пользователя

Страница: 169 / 172

Chapter 10: Appendix
169
v3.3-a 12/07/2022
10.5 and RADIUS server configuration
10.5.1 server installation and configuration
In order to install on a server with Ubuntu 18.04, it is possible to use APT to install
version 4.0.4 of the package by using the following command:
apt-get install
After this, it can be verified if the service is running by using the command:
service tacacs_plus status
The first step to configure the server will be opening the port 49 with TCP:
#ufw allow 49/tcp
Rules updated
Rules updated (v6)
The users are configured in the file /etc//tac_plus.conf. To do this, it is possible to modify
the key by replacing it by the one we want to define:
key = sevensecret
The following simple structure can be used to define a user:
user = test-tacacs {
pap = cleartext password
}
It is possible to encrypt the password with the "tac_pwd" terminal command and enter the
password to the settings as follows:
pap = des yD0g3Qn/0ZDsg
Being yD0g3Qn/0ZDsg the encrypted password.
There are more sophisticated configurations that add complexity, such as using groups (which
serve to put common characteristics to a group of users) or acl (which serves to accept or reject
clients depending on their IP address).