Technical data

160 Meru System Director Configuration Guide © 2012 Meru Networks, Inc.
TACACS+ Authentication
Configure TACACS+ Authentication Mode with the CLI
New commands to configure TACACS+ authentication mode for all administrators on
a Cisco ACS server were introduced in System Director 4.1:
 authentication mode global
 primary-tacacs-ip
 primary-tacacs-port
 primary-tacacs-secret
 authentication type tacacs+
 secondary-tacacs-ip
 secondary-tacacs-port
 secondary-tacacs-secret
For command details, see the Meru System Director Command Reference.
CLI Example for Setting Authentication Mode to TACACS+
ramcntrl(0)# configure terminal
ramcntrl(0)(config)# authentication-mode global
ramcntrl(0)(config-auth-mode)# authentication-type tacacs+
ramcntrl(0)(config-auth-mode)# primary-tacacs-
primary-tacacs-ip primary-tacacs-port primary-tacacs-secret
ramcntrl(0)(config-auth-mode)# primary-tacacs-ip 172.18.1.5
ramcntrl(0)(config-auth-mode)# primary-tacacs-secret TacacsP
ramcntrl(0)(config-auth-mode)# secondary-tacacs-
secondary-tacacs-ip secondary-tacacs-port secondary-tacacs-secret
ramcntrl(0)(config-auth-mode)# secondary-tacacs-ip 172.18.1.10
ramcntrl(0)(config-auth-mode)# secondary-tacacs-secret TacacsS
ramcntrl(0)(config-auth-mode)# exit
ramcntrl(0)(config)# exit
ramcntrl(0)# sh authentication-mode
10
Administrators can also do general configuration changes, but cannot upgrade
APs or controllers, nor can they upgrade System Director versions using Telnet.
The cannot configure an NMS server, NTP server, change the system password,
date or time (all CLI). They cannot create admins nor can they set the
authentication mode for a controller (GUI and CLI). Administrators cannot add
or remove licensing.
15
SuperUser administrators can perform all configurations on the controller.
They are the only ones who can upgrade APs or controllers and they can
upgrade System Director versions using Telnet. The can configure an NMS
server, NTP server, system password, date and time (all CLI). They can also
create admins and set the authentication mode for a controller (GUI and CLI).
Superusers can add and remove licensing.