Vertiv Avocent ACS800, Инструкция по установке и эксплуатации

Страница: 54 / 100

Remote authentication may be tried first, followed by local (Remote_Method/Local).
-or-
Local authentication may be tried only if a remote authentication server is down (Remote_Method_Down_Local).
An administrator can configure authentication using the CLI utility and the web UI. The default authentication method for
the console server and the serial ports is Local. Any authentication method that is configured for the console server or the
ports is used for authentication of any user who attempts to log in through Telnet, SSH or the web UI.
Appliance authentication
The console server authenticates for the console server and the ports, either in groups or individually.
NOTE: It is advised when using group authorization that you use the same authentication for both the console server
and all serial ports, or use Single Sign-on Authentication to facilitate group authorization.
When Single Sign-on Authentication is disabled, the console server uses the individual configuration based in the
destination of the access: the console server itself or each serial port. Users must use their password each time they access
an individual port. If enabled, Single Sign-on Authentication will use the authentication server you choose from the pull-
down menu for all access and no further authentication will be needed.
NOTE: Selecting unconfigured from the pull-down menu will allow the ports to continue to use individual
authentication servers, and will require your password the first time you access any port. After that, the port will not
require password authentication if Single Sign-on Authentication is enabled.
To set authentication for the console server:
1. Click Authentication - Appliance Authentication.
2. Select the desired authentication server from the Authentication Type drop-down menu.
3. Select Enable fallback to Local type for root user in appliance console port when the remote authentication
fails and an administrator wants to access the appliance via console port as the root user.
4. Select Enable single sign-on to enable single sign-on authentication, and select the desired authentication
server from the Authentication Type drop-down menu.
5. Click Save .
Authentication servers
When using an authentication server, you must configure its IP address and in most cases other parameters before it can be
used. The following authentication servers require configuration: RADIUS, , LDAP(S)|AD, Kerberos, and DSView
servers.
To configure a RADIUS authentication server:
1. Select Authentication - Authentication Servers - RADIUS .
2. Enter the IP addresses of the First Authentication Server and First Accounting Server.
3. If used, enter the IP addresses for the Second Authentication Server and Second Accounting Server.
4. Enter your secret word or passphrase in the Secret field (applies to both first and second authentication and
accounting servers), then re-enter the secret word or passphrase in the Confirm Secret field.
5. Enter the desired number of seconds for server time-out in the Timeout field.
6. Enter the desired number of retries in the Retries field.
Vertiv™ | Avocent® ACS800/8000 Advanced Console Server Installer/User Guide
50