
In the console server, configure a new authorization group TACACS_1 , and configure the access rights for this
group. In the TACACS+ server, configure the user regina with the following attribute: raccess = group_
name=TACACS_1;
Then, configure the user special with the following attribute: raccess = group_name=admin;
During the authentication phase, the console server will receive the attribute raccess from the TACACS+ server.
The user regina belongs to the authorization group TACACS_1 and the user special belongs to the authorization
group admin.
To configure a group in a RADIUS authentication server:
Define which group(s) the user belongs to in the attribute FRAMED_FILTER_ID with the following syntax:
[:group_name=]<acs6000_group1>[,<acs6000_group2>];
NOTE: The group names should be separated by a comma and end with a semi-colon.
NOTE: The ACS 6000 console server accepts multiple FRAMED_FILTER_ID attributes.
For example:
In the console server, configure new authorization groups RADIUS_1 and RADIUS_2, and configure the access
rights for these groups. In the Radius server, configure the user regina with the following attribute:
FramedFilterID = group_name=RADIUS_1,RADIUS_2;
-or-
FramedFilterID = RADIUS_1,RADIUS_2;
-or-
FramedFilterID = RADIUS_1;
FramedFilterID += RADIUS_2;
Then, configure the user special with the following attribute:
FramedFilterID = group_name=admin;
During the authentication phase, the console server will receive the attribute FramedFilterID from the RADIUS
server. The user regina belongs to authorization group RADIUS_1 and RADIUS_2. and the user special belongs
to authorization group admin.
To configure group an LDAP authentication server:
On the LDAP server, edit the info attribute for the user and add the following syntax.
info: group_name=<Group1>[,<Group2>,...,<GroupN>];
DSView software access rights
An administrator can configure how the DSView software's viewer session rights will be mapped to the console
server's access rights when a user accesses a target via the DSView software's serial viewer.
To configure the map of DSView software access rights to console server access rights:
1. Click Users – Authorization – DSView Access Rights.
50 Cyclades™ ACS 6000 Advanced Console Server
Comentarios a estos manuales