Setting authentication methods, Setting general authentication – HP StorageWorks Enterprise File Services WAN Accelerator User Manual

Page 109

Advertising
background image

HP S

TORAGE

W

ORKS

EFS WAN A

CCELERATOR

M

ANAGEMENT

C

ONSOLE

U

SER

G

UIDE

109

2 -
C

ON
FIG

URING

TH
E

HP

EF

S

WA

N

A

C

C

EL
ER
ATO

R

Setting Authentication Methods

The following section describes how to set administrator and monitor passwords,
Remote Authentication Dial-In User Service (RADIUS), and Terminal Access
Controller Access Control System (TACACS+) authentication. It contains the
following sections:

‹

“Setting General Authentication,”

next

‹

“Setting the Administrative Password” on page 111

‹

“Setting the Monitor Password” on page 112

‹

“Setting RADIUS Servers” on page 112

‹

“Setting TACACS+ Servers” on page 114

‹

“Specifying Web UI Settings” on page 116

‹

“Setting the Message of the Day (MOTD)” on page 117

Setting General
Authentication

You can prioritize local, RADIUS, and TACACS+ authentication methods for the
system and set the authorization policy and default user for RADIUS and TACACS+
authorization systems in the Setup: Authentication - General Settings page.

IMPORTANT: Make sure to put the authentication methods in the order in which you want
authentication to occur. If authorization fails on the first method, the next method is attempted,
and so forth, until all the methods have been attempted.

TIP: To set TACACS+ authorization levels (admin or read-only) to allow certain members of
a group to logon, add the following attribute to users on the TACACS+ server:
service = rbt-exec {
local-user-name = "monitor"
}
where you replace monitor with admin for write access.

Advertising