Cabletron Systems CyberSWITCH CSX150 User Manual

Also see for CyberSWITCH CSX150: User guide Quick start guide

Contents

USER’S GUIDE164 CyberSWITCHinformation from the secondary server if one is configured. The connection will be released ifneither server responds to the access requests.The section titled On-node Device Table Security Requirements describes the device authenticationinformation required for each type of remote device. The information you need to configuredepends upon what you have configured for the CyberSWITCH operating mode (bridging and/orrouting), and the security options you select.To configure the RADIUS Server itself, refer to the RADIUS Authentication Server User’s Guide. Ifyou have Internet access, you may obtain this guide by following the steps outlined below:• Use your Web browser to get to the following address: http:// service.nei.com• From the resulting screen, click on Public.• Click on the Radius directory.• Click on the Docs directory. The guide will be under this directory.TACACS A UTHENTICATION S ERVERCONFIGURING A TACACS A UTHENTICATION SERVERNote: In order for the CyberSWITCH to reference the TACACS server, basic IP information mustbe configured. If the IP Host mode is not in use, you must also configure the following:• a LAN Network interface must be configured appropriately for the IP networkconnected to each LAN port on the system• at least one WAN Network Interface must be configured for TACACS to be operableU SING CFGEDIT1. Select option (3), TACACS from the Off-node Server Information menu. If you need guidanceto find this menu, refer to the instructions provided in the VRA Manager Authentication Serverconfiguration section. The following screen will be displayed:2. Select (1) Primary Server to enter the following information:a. IP address of the Authentication Serverb. UDP port number used by the Authentication ServerTACACS Authentication Server Menu:Primary ServerIP Address is 001.002.003.004UDP Port Number is 49Secondary ServerIP Address is 001.002.003.008UDP Port Number is 49Access Request RetryNumber of Access Retries is 3Time between Retries is 1 secondTACACS Packet Format is (ID CODE,PIN)TACACS Server Configuration Options:1) Primary Server2) Secondary Server3) Access Request RetrySelect function from above or for previous menu: