EnerSys Alpha Cordex CXC HP User Manual

Cordex®CXCHPControllerSoftwareManual|20-Maintainingthecontroller
Notice: The user can pick any attribute supported by RADIUS to return the user role. The
important thing is that the attribute ID used must match the attribute used to define the user's role
in the RADIUS server's user configuration.
• Remote Authentication Type: WhensettoRADIUS (TACACS+ is disabled),usersareallowed
tobeauthenticatedbyaRADIUSserver.
• RADIUS Authentication Server Address: TheDNSnameortheIPv4/IPv6addressforthe
RADIUSserver.
• RADIUS Authentication Server Port: Thedefaultportis1812.
• RADIUS Timeout: Thetime,inseconds,thatthecontrollerwaitsforaresponsefromtheRADIUS
server.
• RADIUS Encryption Protocol: Theauthenticationmethodusedbythecontrollertoencrypt
userpasswords.ThisiseitherPasswordAuthenticationProtocol(PAP)orChallenge-Handshake
AuthenticationProtocol(CHAP).
• RADIUS Server Shared Secret: ThesharedsecretbetweenthecontrollerandtheRADIUS
server.SetthisvaluebyusingtheSet Shared Secret button.Youcancleartheconfiguredshared
secretbyusingtheClear Shared Secret button.
20.7.2. TACACS+ authentication
TerminalAccessControllerAccessControlSystemPlus(TACACS+)isaclient/serverprotocoland
softwarethatenablesclientstocommunicatewithacentralservertoauthenticateandauthorizetheir
accesstotherequestedsystemorservice.ThissectiondescribesTACACS+authenticationand
authorization,itsfeatures,andhowtosetupthecontrollerasaTACACS+client.
Notice: See your TACACS+ server documents for any detailed information on setting up the
TACACS+ server.
20.7.2.1. TACACS+ authentication
TheCordex®CXCHPcontrollercanbeconfiguredtouseaTACACS+servertoremotelyauthenticate
users.Inthiscase,thecontrollerisactingasaTACACS+client.ATACACS+server,suchas
TACACS.net,mustbeconfiguredseparatelyforremoteauthenticationtoworkcorrectly.
ThefollowingarefeaturesforusingTACACS+authentication.
• Encryption Protocol: ProvidesencryptedPasswordAuthenticationProtocol(PAP),Challenge-
HandshakeAuthenticationProtocol(CHAP),orASCIIAuthentication.
• Encrypted TACACS+ Secret Key: Providesasecurelyencrypted,secretkeywhichisnotsent
betweenthecontrollerandtheTACACS+server.Thesecretkeymustbesetidenticallyonboththe
controllerandtheTACACS+server.
Page 216 0350058-J0 Rev AL

EnerSys Alpha Cordex CXC HP Specifications

General

Brand	EnerSys
Model	Alpha Cordex CXC HP
Category	Controller
Language	English