Server Technology PT40 Dokumentacja Pobierz pdf (Strona 65)

TACACS+ Technical Specifications

Authentication START Packet includes:

action = 1 (TAC_PLUS_AUTHEN_LOGIN)

priv_lvl = 0 (TAC_PLUS_PRIV_LVL_MIN)

authen_type = 1 (TAC_PLUS_AUTHEN_TYPE_ASCII)

service = 1 (TAC_PLUS_AUTHEN_SVC_LOGIN)

user = (entered username)

port = (access path into the Sentry)

rem_addr = ‘Sentry3_xxxxxx’ (xxxxxx is last six digits of MAC address)

data = ‘‘ (null)

NOTE: The password is sent in a CONTINUE packet.

Authorization REQUEST Packet includes:

authen_method = 6 (TAC_PLUS_AUTHEN_METH_TACACSPLUS)

priv_lvl = 0 (TAC_PLUS_PRIV_LVL_MIN)

authen_type = 1 (TAC_PLUS_AUTHEN_TYPE_ASCII)

authen_service = 1 (TAC_PLUS_AUTHEN_SVC_LOGIN)

user = (entered username)

port = (access path into the Sentry)

rem_addr = ‘Sentry3_xxxxxx’ (xxxxxx is last six digits of Ethernet MAC address)

service = ‘shell’ (for exec)

cmd = ‘‘ (null)

NOTE: The access paths into the Sentry which support TACACS+ are ‘Console’, ‘Telnet’, ‘SSH’, ‘HTTP’ and

‘HTTPS’. In the case of ‘Console’ and ‘Modem’, an administrator is allowed to rename these ports in which case the

assigned name is used.

Sentry Commander - PT40 Advanced Operations • 65

Installation and Operations Manual

1 2 ... 60 61 62 63 64 65 66 67 68 69 70 ... 73 74

Brak uwag

Server Technology PT40 Dokumentacja Strona 65