HP StorageWorks Enterprise File Services WAN Accelerator Deployment Guide (November 2005)

HP EFS WAN ACCELERATOR DEPLOYMENT GUIDE 97
9 - RADIUS AND TACACS+
A
UTHENTICATION
CHAPTER 9 RADIUS and TACACS+
Authentication
In This Chapter This chapter describes how to configure Remote Authentication Dial-In User
Service (RADIUS) or Terminal Access Controller Access Control System
(TACACS+) authentication for the HP EFS WAN Accelerator. It contains the
following sections:
 “Introduction to Authentication,” next
 “Configuring a RADIUS Server with FreeRADIUS” on page 99
 “Configuring a TACACS+ Server with Free TACACS+” on page 100
 “Configuring RADIUS Authentication in the HP EFS WAN Accelerator”
on page 101
 “Configuring TACACS+ Authentication in the HP EFS WAN
Accelerator” on page 103
Introduction to Authentication
The HP EFS WAN Accelerator can use a RADIUS or TACACS+ authentication
system for logging in administrative and monitor users. The following
methods for user authentication are provided with the HP EFS WAN
Accelerator:
 local
 radius
 tacacs+
The order in which authentication is attempted is based on the order specified
in the Authentication, Authorization, Accounting (AAA) method list. The
local value must always be specified in the method list.
The authentication methods list provides backup methods if a method fails to
authenticate a user. Failure is defined as no response for the method. If a deny
is received from the method being tried, no other methods are attempted.