Cabletron Systems Cabletron CyberSWITCH CSX5500 User Manual

Also see for CyberSWITCH 5500: Quick start Manual

Contents

USER’S GUIDE218 CyberSWITCHIf a specific set of parameters is required for a particular device, configure the specific deviceindependently, either locally (through the on-node device list) or in CSM. The CyberSWITCH willlook at the configured device table first before proceeding to the dynamic device defaultconfiguration. Since the configured device table overrides the default configuration, leave thedynamic device option enabled, and configure specific devices for exceptional cases only.TACACS A UTHENTICATION S ERVERCONFIGURING A TACACS A UTHENTICATION SERVERNote: In order for the CyberSWITCH to reference the TACACS server, basic IP information mustbe configured. If the IP Host mode is not in use, you must also configure the following:• a LAN Network interface must be configured appropriately for the IP networkconnected to each LAN port on the system• at least one WAN Network Interface must be configured for TACACS to be operableU SING CFGEDIT1. Select option (3), TACACS from the Off-node Server Information menu. If you need guidanceto find this menu, refer to the instructions provided in the CSM Authentication Serverconfiguration section. The following screen will be displayed:2. Select (1) Primary Server to enter the following information:a. IP address of the Authentication Serverb. UDP port number used by the Authentication Server3. Optional: configure a secondary TACACS Server with selection (2). In the event that theprimary server does not respond to system requests, the secondary server will be queried fordevice authentication information. The address of the Secondary Server must not be the sameas the Primary Server.4. Select (3) Access Request Retry to finish configuration. Specify the number of access requestretries that the system will send to the Authentication Server, as well as the time betweenretries. You may also specify order of the TACACS authentication prompts for access request.TACACS Authentication Server Menu:Primary ServerIP Address is 001.002.003.004UDP Port Number is 49Secondary ServerIP Address is 001.002.003.008UDP Port Number is 49Access Request RetryNumber of Access Retries is 3Time between Retries is 1 secondTACACS Packet Format is (ID CODE,PIN)TACACS Server Configuration Options:1) Primary Server2) Secondary Server3) Access Request RetrySelect function from above or for previous menu: