Technical data

Local Admin Authentication

7. Optionally repeat steps 4, 5 and 6 for a secondary TACACS+ server.

8. Click OK.

9. Add administrators on the TACACS+ server using these three levels.

Local Admin Authentication

Local admin authentication takes place on the controller and uses the same three

privilege levels as Radius and TACACS+, 15 (superuser), 10 (admin), and 1 (user). If

administrators are using Local authentication, they cannot use Radius or TACACS+.

Configure an Admin for Local Authentication Mode With the CLI

Use these commands, new in release 4.1, to configure local administrators with the

CLI:

 authentication-mode global

 authentication-type local

 local-admin

 password

 privilege-level

 show local admins

For command details, see the Meru System Director Command Reference.

Operator is the lowest authentication level and also the default. Operators

can see statistics and results but cannot make any configuration changes.

Administrators can also do general configuration changes, but cannot upgrade

APs or controllers, nor can they upgrade System Director versions using Telnet.

The cannot configure an NMS server, NTP server, change the system password,

date or time (all CLI). They cannot create admins nor can they set the

authentication mode for a controller (GUI and CLI). Administrators cannot add

or remove licensing.

SuperUser administrators can perform all configurations on the controller.

They are the only ones who can upgrade APs or controllers and they can

upgrade System Director versions using Telnet. The can configure an NMS

server, NTP server, system password, date and time (all CLI). They can also

create admins and set the authentication mode for a controller (GUI and CLI).

Superusers can add and remove licensing.