14: User Authentication
EMGâ„¢ Edge Management Gateway User Guide 288
3. To disable a method currently in the Enabled methods list, select the method and click the
right arrow between the lists.
4. To set the order in which the EMG unit will authenticate users, use the up and down
arrows to the left of the Enabled methods list.
5. For Attempt next method on authentication rejection, you have the following options:
- To enable the EMG to use all methods, in order of precedence, until it obtains a
successful authentication, select the check box. This is the default.
- To enable the EMG unit to use only the first authentication method that responds (in case
a server is down or unavailable), clear the check box.
Note: When limiting accessibility of the sysadmin login to the physical EMG
console manager device, make sure to uncheck Attempt next method on
authentication rejection.
6. Click Apply.
Now that you have enabled one or more authentication methods, you must configure them.
Authentication Commands
Go to Authentication Commands to view CLI commands which correspond to the web page
entries described above.
TACACS+
(Terminal Access
Controller Access Control
System)
TACACS+ allows a remote access server to communicate with an
authentication server to determine whether the user has access to the network.
TACACS+ is a completely new protocol and is not compatible with TACACS or
XTACACS. The EMG supports TACACS+ only.
Local Users Local accounts on the EMG unit used to authenticate users who log in using
SSH, Telnet, the web, or the console port.