Chapter 26 AAA
OLT2406 User’s Guide
218
The following table describes the labels in this screen.
26.5 AAA Setup
Use this screen to configure authentication, authorization and accounting settings on the OLT. Click on
the AAA Setup link in the AAA screen to view the screen as shown.
Table 77 Advanced Application > AAA > TACACS+ Server Setup
LABEL DESCRIPTION
Authentication
Server
Use this section to configure your TACACS+ authentication settings.
Mode This field is only valid if you configure multiple TACACS+ servers.
Select index-priority and the OLT tries to authenticate with the first configured TACACS+ server,
if the TACACS+ server does not respond then the OLT tries to authenticate with the second
TACACS+ server.
Select round-robin to alternate between the TACACS+ servers that it sends authentication
requests to.
Timeout Specify the amount of time in seconds (between 1 to 1000) that the OLT waits for an
authentication request response from the TACACS+ server.
If you are using index-priority for your authentication and you are using two TACACS+ servers
then the timeout value is divided between the two TACACS+ servers. For example, if you set
the timeout value to 30 seconds, then the OLT waits for a response from the first TACACS+
server for 15 seconds and then tries the second TACACS+ server.
Index This is a read-only number representing a TACACS+ server entry.
IP Address Enter the IP address of an external TACACS+ server in dotted decimal notation.
TCP Port The default port of a TACACS+ server for authentication is 49. You need not change this value
unless your network administrator instructs you to do so.
Shared Secret Specify a password (up to 32 alphanumeric characters) as the key to be shared between the
external TACACS+ server and the OLT. This key is not sent over the network. This key must be the
same on the external TACACS+ server and the OLT.
Delete Check this box if you want to remove an existing TACACS+ server entry from the OLT. This entry
is deleted when you click Apply.
Accounting
Server
Use this section to configure your TACACS+ accounting settings.
Timeout Specify the amount of time in seconds (between 1 to 1000) that the OLT waits for an
accounting request response from the TACACS+ server.
Index This is a read-only number representing a TACACS+ accounting server entry.
IP Address Enter the IP address of an external TACACS+ accounting server in dotted decimal notation.
TCP Port The default port of a TACACS+ accounting server is 49. You need not change this value unless
your network administrator instructs you to do so.
Shared Secret Specify a password (up to 32 alphanumeric characters) as the key to be shared between the
external TACACS+ accounting server and the OLT. This key is not sent over the network. This key
must be the same on the external TACACS+ accounting server and the OLT.
Delete Check this box if you want to remove an existing TACACS+ accounting server entry from the
OLT. This entry is deleted when you click Apply.
Apply Click Apply to save your changes to the OLT’s run-time memory. The OLT loses these changes if
it is turned off or loses power, so use the Save link on the top navigation panel to save your
changes to the non-volatile memory when you are done configuring.
Cancel Click Cancel to begin configuring this screen afresh.
To Next Page
Loading...
