Kentrox AI232 - Manual (Page 36)

AI232 Version 9.6x User’s Guide
AI232 Local Menu System: Identifying AI232 Menu System Security Options
3-2
Identifying AI232 Menu System Security Options
AI232 has a variety of security options, including:
z Multilevel User Name and Password Security
z RADIUS Authentication
z TACACS+ Authentication
z PPP Authentication Protocols (PAP and CHAP)
Multilevel User Name and Password Security
Up to 10 configurable user account profiles can be assigned to an AI232 user. Five
system profiles are available for providing various levels of user access. For more
information about user profiles, refer to command profile on page 1-103.
RADIUS Authentication
RADIUS authentication verifies user login information against valid user information in
a database on a centralized RADIUS authentication server. A primary and secondary
RADIUS server are configurable to provide secure access for an entire AI232
network. AI232 RADIUS authentication is available for Telnet, asynchronous, and
synchronous ports. For more information on RADIUS authentication, refer to section
RADIUS Configuration on page 1-19.
TACACS+ Authentication
TACACS+ authentication verifies user login information against the user’s permission
level on a TACACS+ server. Up to 9 TACACS+ servers are configurable to provide
secure access for an entire AI232 network. AI232 TACACS+ authentication is
available for Telnet, asynchronous, and FTP connections. For more information on
TACACS+ authentication and server configuration, refer to the following commands:
z aaa authen on page 8-7 z tacacs server on page 8-96
z aaa author on page 8-8 z tacacs server phase on page 8-98
z aaa fallback on page 8-10 z tacacs server ip on page 8-97
z aaa timeout on page 8-19 z tacacs server port on page 8-100
z aaa ppp authen on page 8-11 z tacacs server secret on page 8-101