Black Box LES1508A - RADIUS;TACACS User Configuration; Group Support with Remote Authentication

_____________________________________________________________________
724-746-5500 | blackbox.com Page 201
%
\DEDP% >L=B?FK!L7L7F%? $3,%70(4#-),'/#0(%%
&%'(%!O+1!R'!+55'5!32!3#'!.26+.!!" #$"%&'$&()&(!+NN.$+,6'M!U7!3#'1!+('!,23!+55'5!+,5!3#'1!.24!$,!<$+!
('O23'!DD DE!+!-% '(!/ $..!R'!+5 5' 5!72 (!3#'OM!"#$%!-%'(!/$..!,23!%#2/ !-N !$,!3#' !8.+60!829!62,7$4-(+32(%!
-,.'%%!3#'1!+('!%N'6$7$6+..1!+55'5E!+3!/#$6#!N2$,3!3#'1!+('!3(+,%72(O'5!$,32!+!62O N.'3'.1!.26+.!-%'(M!"#'!
,'/.1!+55'5!-%'(!O-%3!+-3#',3$6+3'!7(2O!3#'!('O23'!DDD!%'(<'(E!+,5!/$..!#+<'!,2!+66'%%!$7!$3!$%!52/,M!
U7!+!.26+.!- %' (!.2 4 % !$, E!3# ' 1!O+1!R'!+- 3# ' , 3$6 +3 ' 5 _+ -3#2 ($a'5 !7(2O !3# '!('O 2 3'!DD D !%'(<' (E!5'N' ,5 $,4 !2,!
3#'!6#2%',!N ($2($31!27!3# '!('O 2 3'!D DD M!!D!.26+.!-%' ()%!+-3# 2($a+ 3$2, !$%!3#'!-, $2,!2 7!.26+.!+, 5!(' O 23' !
N($<$.'4'%M!
?9+ON.'!@V!
&%'(!"$O!$%!.26+..1!+55'5E!+,5!#+%!+66'%%!32!N2(3%!@!+,5!HM!\'!$%!+.%2!5'7$,'5!2,!+!('O23'!
"D:D:;!%'(<'(E!/#$6#!%+1%!#'!#+%!+66'%%!32!N2(3%!G!+,5!IM!"$O!O+1!.24!$,!/$3#!'$3#'(!#$%!.26+.!2(!
"D:D:;!N+%%/2(5E!+,5!/$..!#+<'!+66'%%!32!N2(3%!@!3#(2-4#!IM!U7!"D:D:;!$%!52/,E!# '!/$..!,''5!32!
-%'!#$%!.26+.!N+%%/ 2(5E!+,5!/$..!2,.1!R'!+R.'!32!+66'%%!N2(3%!@!+,5!HM!
?9+ON.'!HV!
&%'(!8',!$%!2,.1!5'7$,'5!2,!3#'!"D:D:;!%'(<'(E!/#$6#!%+1%!#'!#+%!+66'%%!32!N2(3%!A!+,5!FM!i#',!
#'!+33'ON3%!32!.24!$,E!+!,'/!-%'(!/$..!R'!6('+3'5!72(!#$OE!+,5!#'!/$..!R'!+R.'!32!+66'%%!N2(3%!A!
+,5!FM!U7!3#'!"D:D:;!%'(<'(!$%!52/, !#'!/$..!#+<'!,2!+66'%%M!
?9+ON.'!GV!
&%'(!W+-.!$%!5'7$,'5!2,!+!LDXU&;!%'(<'(!2,.1M!\'!#+%!+66'%%!32!+..!%'($+.!N2(3%!+,5!,'3/2(0!#2%3%M!
?9+ON.'!IV!
&%'(!X2,!$%!.26+..1!5'7$,'5!2,!+,!+NN.$+,6'!-%$,4!LDXU&;!72(!DDDM!?<',!$7!X2,!$%!+.%2!5'7$,'5!2,!
3#'!LDXU&; !%'(<' (E!#'!/ $..!2,.1!# +<' !+66' %%!32!3# 2%' !%'($+.!N 2(3%!+, 5!, '3/ 2 (0!#2 %3%!#' !#+ %!R'' ,!
+-3#2($a'5!32!-%'!2 ,!3#'!+NN.$+,6'M!
U7!+!P,2!.2 6 +.!DDDg!2N3 $2 , !$%!% ' .'6 3' 5 E!3# ' , !(223!/$..!%3$..!R' !+ - 3# ' , 3$6 + 3' 5 !.2 6+ ..1 M!
l2-!6+,!+55!('O23'!-%'(%!32!3#'!+5O$,!4(2-N!<$+!'$3#'(!LDXU&;!2 (!"D: D: ;M!& %'(%!O + 1!#+ <'!+!%' 3!27!
+-3#2($a+3$2,%!%'3!2,!3#'!('O23'!"D:D:;!%'(<'(M!&%'(%!+-32O+3$6+..1!+55'5!R1!LDXU&;!/$..!#+<'!
+-3#2($a+3$2,!72(!+..!('%2-(6'%E!/#'('+%!3#2%'!+55'5!.26+..1!/$..!%3$..!,''5!3#'$(!+-3#2($a+3$2,%!%N'6$7$'5M!
>XDW!#+%!,23!R'',!O25$7$'5E!+,5!/ $..!%3$..!,''5!.26+..1!5'7$,'5!-%'(%M!
\DEDS% Y,0)2%$)220,/%G#/"%,360/3%')/"3(/#A'/#0(%
All console servers allow remote authentication via RADIUS, LDAP, and TACACS+. With RADIUS and
LDAP, additional restrictions can be provided on user access based on group information or membership.
For example, with remote group support, RADIUS and LDAP users can belong to a local group that has
been setup to have restricted access to serial ports, network hosts, and managed devices.
Remote authentication with group support works by matching a local group name with a remote group
name provided by the authentication service. If the list of remote group names returned by the
authentication service matches any local group names, the user is given permissions as configured in the
local groups.
To enable group support to be used by remote authentication services: