HP StorageWorks Enterprise File Services WAN Accelerator 2.1.5 deployment guide (June 2006)

HP STORAGEWORKS ENTERPRISE FILE SERVICES WAN ACCELERATOR 2.1.5 DEPLOYMENT GUIDE 101
9 - RADIUS AND TACACS+
A
UTHENTICATION
user = admin {
pap = cleartext "tacadmin"
user = monitor {
pap = cleartext "tacmonitor"
user = tacuser {
pap = cleartext "tacpass"
service = rbt-exec {
local-user-name = "monitor"
}
The secret you specify here must also be specified in the HP EFS WAN Accelerator
when you set up TACACS+ server support. For detailed information, see the HP
Enterprise File Services WAN Accelerator Management Console User Guide.
The tacuser is a monitor user as specified by local-user-name.
NOTE: The chap, opap, and arap variables can be specified in a similar manner, but only pap
is needed.
8. Start the server by executing:
>/usr/local/sbin/tac_plus -C /usr/local/etc/tac_plus.conf
Configuring RADIUS Authentication
in the HP EFS WAN Accelerator
The following section provides the basic steps for configuring RADIUS authentication
in the HP EFS WAN Accelerator.
Configuring
RADIUS
Authentication
The following section describes the basic steps for configuring RADIUS
authentication in the HP EFS WAN Accelerator.
You prioritize RADIUS authentication methods for the system and set the
authorization policy and default user.
IMPORTANT: Make sure to put the authentication methods in the order in which you want
authentication to occur. If authorization fails on the first method, the next method is attempted,
and so forth, until all the methods have been attempted.