BayTech MRP units 2012 - Manual (Page 42)

Page
42
TACACS Configuration
Menu 6: Network TACACS Configuration
TACACS Server IP Address is: 0.0.0.0
Enter TACACS server address in dotted decimal form :
TACACS Backup IP Address is: 0.0.0.0
Enter TACACS server address in dotted decimal form :
URPC usernames as backup login is Disabled
Enable ? (Y/N), CR for no change) :
Select 1),
TACACS Enable sends the login information to the TACACS server for authentication. If
enabled, the primary TACACS server
addresses must be specified.
Select 2),
TACACS Server Address
assigns a specific TACACS server IP
addresses.
Select 3),
TACACS Backup Server
Address assigns a specific Backup
Server IP addresses.
Select 4),
TACACS Secret assigns a secret word shared
between the TACACS server and this unit. A secret
can be up to 16 characters and must be exactly the same
as the secret stored on the server.
Select 5),
Enable URPC usernames as
backup allows an unsecured access in case all
specified radius servers are unavailable.
TACACS Enable....................1 Enable/Disable TACACS
TACACS Server Address............2 TACACS server IP address 0.0.0.0
TACACS Backup Server Address.....3 Backup TACACS server IP address
TACACS Secret....................4 TACACS secret key (16 char max)
Enable URPC usernames as backup..5 As written
TACACS Encryption Enable.........6 Enable/Disable encryption
TACACS login Timeout.............7 Sets Time units waits for response
TACACS Server Port...............8 Assign secure TCP port
URPC Privilege Level Enable......9 Enable/Disable TACACS privilege
URPC Privilege Level.............10 Set Privilege Level 1-15
Exit.............................X, CR
Select 4) from the Login
Setup Menu
displays the
TACACS Configuration
menu
Setting up TACACS
To enable TACACS for logins do the following:
 Enable TACACS from the TACACS configuration menu.
 Enter the IP address of the TACACS server
 Enter the IP address of the backup TACACS server if any.
 Enable local logins as a backup to the TACACS server if needed.
 Secret word must match the secret word in the TACACS server configuration.
 Enable URPC Privilege Level and set levels.
 Enable usernames and passwords for the network and serial port via the logins setup access control
menu.
TACACS can be used to authenticate logins for the serial port, the network port, modem or all three. When
a telnet / SSH session (or RS232 session) is started the Host module will prompt for the username then a
password. The Host will send the username and password to the TACACS server. If the server verifies
the username and password, the Host will display the menus. If the server rejects the username and
password or does not respond the Host will display the reason the login failed.
TACACS login is...................Disabled
Enable ? (Y/N), CR for no change) :
TACACS secret is: HardlyASecret
Enter TACACS secret (16 chars max).
: