An administrator can configure authentication using the CLI utility and the web manager. The default
authentication method for the console server and the serial ports is Local. Any authentication method
that is configured for the console server or the ports is used for authentication of any user who attempts
to log in through Telnet, SSH or the web manager.
3.11.1 Appliance authentication
The console server authenticates for the console server and the ports, either in groups or individually.
NOTE: It is advised when using group authorization that you use the same authentication for both the
console server and all serial ports, or use Single Sign-on Authentication to facilitate group
authorization.
When Single Sign-on Authentication is disabled, the console server uses the individual configuration
based in the destination of the access: the console server itself or each serial port. Users must use their
password each time they access an individual port. If enabled, Single Sign-on Authentication will use the
authentication server you choose from the pull-down menu for all access and no further authentication
will be needed.
NOTE: Selecting unconfigured from the pull-down menu will allow the ports to continue to use
individual authentication servers, and will require your password the first time you access any port.
After that, the port will not require password authentication if Single Sign-on Authentication is
enabled.
To set authentication for the console server:
1. Click Authentication - Appliance Authentication.
2. Select the desired authentication server from the Authentication Type drop-down menu.
3. Select Enable fallback to Local type for root user in appliance console port when the remote
authentication fails and an administrator wants to access the appliance via console port as the
root user.
4. Select Enable single sign-on to enable single sign-on authentication, and select the desired
authentication server from the Authentication Type drop-down menu.
5. Click Save.
3.11.2 Authentication servers
When using an authentication server, you must configure its IP address and in most cases other
parameters before it can be used. The following authentication servers require configuration: RADIUS,
TACACS+, LDAP(S)|AD and DSView servers.
To configure a RADIUS authentication server:
1. Select Authentication - Authentication Servers - RADIUS.
2. Enter the IP addresses of the First Authentication Server and First Accounting Server.
3. If used, enter the IP addresses for the Second Authentication Server and Second Accounting
Server.
4. Enter your secret word or passphrase in the Secret field (applies to both first and second
authentication and accounting servers), then re-enter the secret word or passphrase in the
Confirm Secret field.
5. Enter the desired number of seconds for server time-out in the Timeout field.
6. Enter the desired number of retries in the Retries field.
Vertiv | Avocent® ACS6000 Advanced Console Server Installer/User Guide 55
To Next Page
Loading...
Need help?
General
