Lantronix S3220 Series User Guide Rev J PDF 34.75 MB - Page 120

Transition Networks ION x222x / x32xx User Guide Login Type Configuration (Local / RADIUS / TACACS+) The MAIN tab and/or CLI commands let you define the ION user login method in terms of local, RADIUS, and/or TACACS+ capability. You can configure the ION user login method via either the CLI or Web method. See the "ION IPv6 Con‐ figuration Considerations" section on page 108. Login Type Config - CLI Method 1. Access the NID through either a USB connection (see "Starting a USB Session" on page 41) or a Telnet session (see "Starting a Telnet Session" on page 43). 2. Check the current Login Type configuration. Type show tacplus config and press Enter. 3. Set the desired login method. If more than just "local" login is required, sets the login sequence (or‐ der of login validation). Type set login method=type, where: type = (local|radiuslocal|tacpluslocal|radiustacpluslocal|tacplusradiuslocal), and: local = the ION software will validate the local login only. radiuslocal = the ION software will validate the RADIUS login and then the local login. radiustacpluslocal = the ION software will validate the RADIUS login, then the TACACS+ login, and then the local login. tacpluslocal = the ION software will validate the TACACS+ login and then the local login. tacplusradiuslocal = the ION software will validate the TACACS+ login, then the RADIUS login, and then the local login. 4. Verify the TACACS+ and/or RADIUS configuration. For example: Agent III C1|S1|L1D>set login method ? local radiuslocal radiustacpluslocal tacpluslocal tacplusradiuslocal Agent III C1|S1|L1D>show tacplus config TACPLUS client state: enable TACPLUS authentication server: index type addr retry timeout 1 ipv4 192.168.1.30 2 25 2 ipv6 fe80::2c0:f2ff:fe21:b24c 3 10 3 dns 0.0.0.0 3 30 4 dns 0.0.0.0 3 30 5 dns 0.0.0.0 3 30 6 dns 0.0.0.0 3 30 33472 Rev. J https://www.transition.com Page 120 of 700