Tripp Lite B092-016 - Chapter 9: Authentication; Authentication Configuration

136
Chapter 9: Authentication
TheTrippLiteConsoleServerisadedicatedLinuxcomputer,anditembodiespopularandprovenLinuxsoftwaremodulesfor
securenetworkaccess(OpenSSH)andcommunications(OpenSSL)andsophisticateduserauthentication(PAM,RADIUS,
TACACS+,KerberosandLDAP).
• ThischapterdetailshowtheAdministratorcanusetheManagementConsoletoestablishremoteAAAauthenticationfor
all connections to the Console Server and attached serial and network host devices
• ThischapteralsocoversestablishingasecurelinktotheManagementConsoleusingHTTPSandusingOpenSSLand
OpenSSHtoestablishasecureAdministrationconnectiontotheConsoleServer
9.1 Authentication Configuration
Authenticationcanbeperformedlocally,orremotelyusinganLDAP,RadiusorTACACS+authenticationserver.Thedefault
authentication method for the Console Server is Local.
AnyauthenticationmethodthatisconguredwillbeusedforauthenticationofanyuserattemptingtologinthroughTelnet,
SSH or the Web Manager to the Console Server and any connected serial port or network host devices.
TheConsoleServercanbeconguredtothedefault(Local)oranalternateauthenticationmethod(TACACS, RADIUS
Kerberos or LDAP)withtheoptionofaselectedorderinwhichlocalandremoteauthenticationistobeused:
Local TACACS /RADIUS/LDAP/Kerberos:Trieslocalauthenticationrst,fallingbacktoremoteiflocalfails
TACACS /RADIUS/LDAP/Kerberos Local:Triesremoteauthenticationrst,fallingbacktolocalifremotefails
TACACS /RADIUS/LDAP/Kerberos Down Local:Triesremoteauthenticationrst,fallingbacktolocaliftheremote
authenticationreturnsanerrorcondition(e.g.theremoteauthenticationserverisdownorinaccessible)
9.1.1 Local authentication
• SelectSerial and Network: Authentication and check Local
• ClickApply