Network Critical SmartNA-X - Changing Your Password

28
S
MARTNA™ 10G NETWORK ACCESS (SMARTNA-X)
ADMINISTERING SMARTNA-X | MANAGING USER ACCOUNTS AND AUTHENTICATION
DRAFT
• Server port: Specifies the communication port, usually 1812 for authentication servers.
• Shared secret: Specify the password/shared-secret required to access the authentication server. Passwords are
case-sensitive.
For TACACS+ servers, specify the following configuration option:
• Server address: Specify the network address of the authentication server.
To edit an existing server, click the button.
6. Click Add server to finish setting up the server.
7. If your network has more than one authentication server running, you can add them as backup/failover servers
and the system will attempt to contact the second server in order to validate a user (the system will not switch
between RADIUS and TACACS+ servers though if both are defined). Note that a RADIUS server will outright
reject a validation request when secrets mismatch and will not attempt to validate the secret on a second
RADIUS server. However, RADIUS will attempt to validate the user on a second server if the user account is
not present on the first server. TACACS+ servers behave differently, and will attempt to contact a backup server
if either the user account is not present or if secrets mismatch.
8. If necessary, use the button to move servers into the desired contact order when several backup servers are
being used.
9. Click Review/apply, review the changes you have made, and then click Apply to implement the new settings.
Using the CLI to add authentication servers
1.
Enable the authentication protocol used by the authentication server. The system supports RADIUS and
TACACS+ authentication servers:
2. Add a master authentication server and any backups employed by your network.
• To add a RADIUS server:
• To add a TACACS+ server:
3. Exit to apply your updates:
See the Commands for managing authentication and accounting, page 100 for information on the authentication
commands.
CONTROLLER>set authentication {radius | tacacs}
CONTROLLER>create radius authserver <ip-address> <port-num> <password>
CONTROLLER>create tacacs authserver <ip-address> <password>
CONTROLLER>exit