50 Cyclades™ ACS 6000 Advanced Console Server Installation/Administration/User Guide
Pluggable Devices
To manage pluggable devices:
1.
If Pluggable Device Detection is enabled, select Pluggable Devices.
-or-
If it is disabled, click Enable Pluggable Device Detection.
2.
Select the checkbox next to the pluggable device you want to configure, or select the checkbox above the list of pluggable devices to select them all.
3.
Click Insert All, Eject or Rename.
4.
To disable detection, click Disable Pluggable Devices Detection.
To view and change pluggable device information:
1.
Select Pluggable Devices and select a pluggable device name.
2.
If the pluggable device type is Network, the Network/Device section will be visible to allow the configuration of the network parameters.
-or-
If the pluggable device type is Modem (V.92 or wireless), the dial-in section will be visible to allow the configuration of the dial-in parameters.
Authentication
Authentication can be performed locally, with OTP, or on a remote Kerberos, LDAP, NIS,
Radius or TACACS+ authentication server. If the console server is managed by a DSView 3 server, DSView authentication is also supported. The console server also supports remote group authorizations for the LDAP, Radius and TACACS+ authentication methods.
Fallback mechanisms of the following types are available:
Local authentication can be tried first, followed by remote, if the local authentication fails
(Local/Remote_Method)
-or-
Remote authentication may be tried first, followed by local (Remote_Method/Local)
-or-
Local authentication may be tried only if a remote authentication server is down (Remote_
Method_Down_Local).
Chapter 3: Accessing the Console Server via the Web Manager 51
An administrator can configure authentication using the CLI utility and the web manager. The default authentication method for the console server and the serial ports is Local. Any authentication method that is configured for the console server or the ports is used for authentication of any user who attempts to log in through Telnet, SSH or the web manager.
Appliance authentication
The console server authenticates for the console server and the ports, either in groups or individually.
NOTE: It is advised when using group authorization that you use the same authentication for both the console server and all serial ports, or use Single Sign-on Authentication to facilitate group authorization.
When Single Sign-on Authentication is disabled, the console server uses the individual configuration based in the destination of the access: the console server itself or each serial port.
Users must use their password each time they access an individual port. If enabled, Single Signon Authentication will use the authentication server you choose from the pull-down menu for all access and no further authentication will be needed.
NOTE: Selecting unconfigured from the pull-down menu will allow the ports to continue to use individual authentication servers, and will require your password the first time you access any port. After that, the port will not require password authentication if Single Sign-on Authentication is enabled.
To set authentication for the console server:
1.
Click Authentication - Appliance Authentication.
2.
Select the desired authentication server from the Authentication Type drop-down menu.
3.
Select Enable single sign-on to enable single sign-on authentication, and select the desired authentication server from the Authentication Type drop-down menu.
4.
Click Save.
Authentication servers
When using an authentication server, you must configure its IP address and in most cases other parameters before it can be used. The following authentication servers require configuration:
RADIUS, TACACS+, LDAP(S)|AD, Kerberos, NIS and DSView 3 servers.
To configure a RADIUS authentication server:
1.
Select Authentication - Authentication Servers - RADIUS.
2.
Enter the IP addresses of the First Authentication Server and First Accounting Server.
3.
If used, enter the IP addresses for the Second Authentication Server and Second Accounting
Server.
52 Cyclades™ ACS 6000 Advanced Console Server Installation/Administration/User Guide
4.
Enter your secret word or passphrase in the Secret field (applies to both first and second authentication and accounting servers), then re-enter the secret word or passphrase in the
Confirm Secret field.
5.
Enter the desired number of seconds for server time-out in the Timeout field.
6.
Enter the desired number of retries in the Retries field.
7.
If you select the Enable Service-Type attribute to specify the authorization group checkbox, enter the authorization group name for each of the following Service Types:
Login, Framed, Callback Login, Callback Framed, Outbound and Administrative.
8.
Click Save.
To configure a TACACS+ authentication server:
1.
Select Authentication - Authentication Servers - TACACS+.
2.
Enter the IP addresses for the First Authentication Server and First Accounting Server.
3.
If used, enter the IP addresses of the Second Authentication Server and Second Accounting
Server.
4.
Select the desired service (PPP or raccess) from the Service drop-down menu.
5.
Enter your secret word or passphrase in the Secret field (applies to both first and second authentication and accounting servers), then re-enter the secret word or passphrase in the
Confirm Secret field.
6.
Enter the desired number of seconds for server time-out in the Timeout field.
7.
Enter the desired number of retries in the Retries field.
8.
If you select the Enable User-Level attribute to specify the authorization group checkbox, enter the authorization group name for up to 15 User-Levels.
9.
Click Save.
To configure an LDAP(S)|AD authentication server:
1.
Select Authentication - Authentication Servers - LDAP(S)|AD.
2.
Enter the IP address of the server.
3.
Enter the Base.
4.
At the Secure drop-down menu, select Off, On or Start_TLS.
5.
Enter the Database User Name.
