Brocade Mobility RFS Controller System Reference Guide (Supporting software release 5.5.0.0 and later) - Manual (Page 691)

Brocade Mobility RFS Controller System Reference Guide 679
53-1003099-01
12
8. Select OK to update the access control configuration. Select Reset to the last saved
configuration.
Setting the Authentication Configuration
Adding or Editing a Management Access Policy
Refer to the Authentication tab to define how user credential validation is conducted on behalf of a
Management Access policy. If utilizing an external authentication resource, an administrator can
optionally apply a TACACS policy. Terminal Access Controller Access - Control System+ (TACACS+) is
a protocol created by CISCO to provide access control to network devices (routers, network access
servers or other networked devices) through one or more centralized servers. TACACS provides
separate authentication, authorization, and accounting services running on different servers.
To configure an external authentication resource:
1. Select the Authentication tab from the Management Policy screen.
FIGURE 6 Management Policy screen - Authentication tab
2. Define the following settings to authenticate management access requests:
Local Select whether the authentication server resource is centralized (local), or whether an external
authentication resource is deployed for validating user access. Local is enabled by default.
RADIUS If local authentication is disabled, define whether the RADIUS server is External or Fallback.
AAA Policy Define the AAA policy used to authenticate user validation requests to the controller or service
platform managed network. Select the Create icon as needed to define a new AAA policy or select
the Edit icon to modify the configuration of an existing policy.
TACACS If local authentication is disabled, optionally select Authentication or Fallback (only one
authentication or fallback option can be selected) or Accounting and Authorization. TACACS
policies control user access to devices and network resources while providing separate accounting,
authentication, and authorization services.
AAA TACACS Policy Select an existing AAA TACACS policy (if available), or select Create to define a new policy or Edit to
modify an existing one.