Document Outline

• 1 TACACS+ Authentication Manager overview
  • TAM features
    • Reliable identity authentication
    • Simple user management
    • Strict and refined user privilege control
    • High-performance, expansible deployment solutions
  • TAM functional structure
    • TAM user types
    • Condition-based authorization
    • Login authorization and command authorization
    • Online user management
    • Log management
  • Login methods and authentication-authorization methods
    • TAM local authentication and authorization
    • LDAP authentication + TAM local authorization
• 2 Configuring device user authentication
  • Configuring TAM local authentication and authorization
    • Configuring TAM
      • Adding a device
      • Adding an authorization condition
      • Adding authorization command sets
      • Adding an authorization policy
      • Adding a device user
    • Configuring a device
      • Creating a TACACS+ scheme
      • Creating a domain
      • Configuring scheme authentication and enabling command-line authorization and accounting
      • Configuration example
    • Configuring the PC of the device user
  • Configuring LDAP authentication + TAM local authorization
    • Configuring an LDAP server
    • Configuring TAM
      • Adding a device
      • Adding an authorization condition
      • Adding authorization command sets
      • Adding an authorization policy
      • Adding an LDAP server
      • Adding an LDAP synchronization policy
    • Configuring a device
      • Creating a TACACS+ scheme
      • Creating a domain
      • Configuring scheme authentication and enabling command-line authorization and accounting
      • Configuration example
    • Configuring the PC of the device user
  • Comparing the authentication-authorization methods
• 3 TAM functions and common operations
  • TAM functions
  • Common operations
    • Sorting a list
    • Navigating a list
• 4 Performing device-related configuration
  • Viewing the device list
  • Querying devices
  • Viewing device details
  • Adding a device
  • Importing devices
  • Modifying a device
  • Batch modifying devices
  • Batch deleting devices
  • Modifying the device area and type
• 5 Managing authorization conditions
  • Managing device areas
    • Viewing the device area list
    • Viewing device area details
    • Adding a device area
    • Adding a sub-area
    • Modifying a device area or a sub-area
    • Deleting a device area or a sub-area
    • Viewing devices in a device area or sub-areas
  • Managing device types
    • Viewing the device type list
    • Viewing device type details
    • Adding a device type
    • Adding a sub-type
    • Modifying a device type or a sub-type
    • Deleting a device type or a sub-type
    • Viewing devices of a device type or sub-types
  • Configuring authorized time range policies
    • Viewing the authorized time range policy list
    • Viewing authorized time range policy details
    • Adding an authorized time range policy
    • Modifying an authorized time range policy
    • Deleting an authorized time range policy
• 6 Authorization command
  • Shell profile
    • Viewing the shell profile list
    • Viewing shell profile details
    • Adding a shell profile
    • Modifying a shell profile
    • Deleting a shell profile
  • Command set
    • Viewing the command set list
    • Viewing command set details
    • Adding a command set
    • Modifying a command set
    • Copying a command set
    • Deleting a command set
• 7 Managing authorization policies
  • Viewing the authorization policy list
  • Viewing authorization policy details
  • Adding an authorization policy
  • Modifying an authorization policy
  • Deleting an authorization policy
• 8 Managing device users
  • Configuring device user groups
    • Viewing the device user group list
    • Viewing device user group details
    • Adding a device user group
    • Adding a sub-group
    • Modifying a device user group or a sub-group
    • Deleting a device user group or a sub-group
    • Viewing device users in a device user group or sub-group
    • Modifying operator privileges for device user groups
  • Configuring device users
    • Viewing the device user list
    • Querying device users
      • Basic query
      • Advanced query
    • Viewing device user details
    • Adding a device user
    • Importing device users
    • Modifying a device user
    • Batch modifying device users
    • Regrouping device users
    • Batch cancelling device users
  • Configuring the blacklist user function
    • Viewing blacklist users
    • Querying blacklist users
      • Basic query
      • Advanced query
    • Viewing blacklist user details
    • Adding device users to the blacklist
      • Blacklisting device users on the device user list
      • Blacklisting a device user on the device user details page
    • Removing device users from the blacklist
      • Unblacklisting device users on the blacklisted user list
      • Unblacklisting a device user on the device user details page
• 9 LDAP authentication
  • LDAP overview
  • Configuration prerequisites
  • Managing LDAP servers
    • Viewing the LDAP server list
    • Viewing LDAP server details
    • Adding an LDAP server
    • Testing connectivity to an LDAP server
    • Configuring the root certificate on TAM
    • Modifying LDAP server settings
    • Deleting an LDAP server
  • Managing LDAP synchronization policies
    • Viewing the LDAP synchronization policy list
    • Viewing LDAP synchronization policy details
    • Adding an LDAP synchronization policy
    • Modifying an LDAP synchronization policy
    • Deleting an LDAP synchronization policy
    • Executing an LDAP synchronization policy
    • Managing users bound to an LDAP synchronization policy
    • Validating on-demand synchronization policies
  • Managing LDAP users
    • Viewing LDAP users
      • Viewing LDAP users in the device user list
      • Viewing LDAP users in the All Bound User list
      • Viewing LDAP users in the bound user list
    • Querying LDAP users
    • Viewing LDAP user details
    • Binding device users with an LDAP synchronization policy
    • Unbinding users from an LDAP synchronization policy
    • Synchronizing LDAP users
    • Modifying LDAP user information
    • Cancelling LDAP users
    • Adding an LDAP user to the blacklist
      • Adding LDAP users to the blacklist on the Device User list page
      • Adding LDAP users to the blacklist on the LDAP user details page
    • Releasing an LDAP user from the blacklist
    • Exporting LDAP users
    • Batch operations for LDAP users
• 10 Managing online users
  • Viewing the online user list
  • Querying online users
    • Basic query
    • Advanced query
  • Viewing online user details
  • Clearing online user information
  • Adding an online user to the blacklist
  • Releasing a blacklisted user
• 11 Managing logs
  • Managing authentication logs
    • Viewing the authentication log list
    • Querying authentication logs
      • Basic query
      • Advanced query
    • Viewing authentication log details
    • Exporting authentication logs
  • Managing authorization logs
    • Viewing the authorization log list
    • Querying authorization logs
      • Basic query
      • Advanced query
    • Viewing authorization log details
    • Exporting authorization logs
  • Managing audit logs
    • Viewing the audit log list
    • Querying audit logs
      • Basic query
      • Advanced query
    • Viewing audit log details
    • Exporting audit logs
• 12 Configuring global system settings
  • Configuring system parameters
  • Configuring the password strategy
  • Configuring system operation log parameters
  • Configuring RSA authentication parameters
  • Validating the system configuration
• 13 Regular expressions
  • Overview
  • Regular expressions in commands
    • Example: Permitting display commands only
    • Example: Denying all display commands except display current-configuration
• 14 Acronyms and terms