Server Technology PT40 Manual de instalación descargar pdf (Pagina 70)

70 • Advanced Operations Smart Cabinet Distribution Unit

Installation and Operations Manual

Setting the TACACS+ encryption key:

The Set TACACS Key command sets the encryption key used to encrypt all data packets between the

Sentry and the TACACS+ server. This key must match the key configured on the TACACS+ server.

To set the encryption key:

At the Smart CDU: prompt, type set tacacs key and press Enter.

At the TACACS+ Key: prompt, type an encryption key of up to 60 alphanumeric and other typeable

characters - (ASCII 33 to 126 decimal) are allowed; encryption keys are case sensitive. Press Enter. To

specify no password, press Enter.

At the Verify TACACS+ Key: prompt, retype the key. Press Enter. To verify no password, press

Enter at the prompt.

Example

Smart CDU: set tacacs key<Enter>

TACACS+ Key: <Enter>

Verify TACACS+ Key: <Enter>

For security, key characters are not displayed.

NOTE: A key size of zero results in no encryption being applied which may not be supported by the TACACS+ server and

is not recommended for a production environment.

Changing the TACACS port:

With TACACS support enabled, the Sentry sends TACACS requests to the default TACACS port number 49.

This port number may be changed using the Set TACACS Port command.

To change the TACACS port:

At the Smart CDU: prompt, type set tacacs port, followed by the port number and press Enter.

Example

The following changes the TACACS port number to 50:

Smart CDU: set tacacs port 50<Enter>

Setting the authentication order:

The Set Authorder command sets the authentication order for remote authentication sessions. The

Sentry supports two methods for authentication order - Remote -> Local and Remote Only.

The Remote -> Local method first attempts authentication with the TACACS+ server and if

unsuccessful with the local user database on the Sentry device.

The Remote Only method attempts authentication only with the TACACS+ server and if unsuccessful,

access is denied.

NOTE: With the Remote Only method, if authentication fails due to a communication failure with the TACACS+ server

automatic authentication fallback will occur to authenticate with the local user data base on the Sentry device.

To set the authentication order:

At the Smart CDU: prompt, type set authorder, followed by remotelocal or remoteonly and press

Enter.

NOTE: Server Technology recommends NOT setting the authentication order to Remote Only until the TACACS+ has

been fully configured and tested.

1 2 ... 65 66 67 68 69 70 71 72 73 74 75 ... 89 90

Sin comentarios

Server Technology PT40 Manual de instalación Pagina 70