[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

Configuring Authentication Order

The procedure provided in this section configures the Services Router to attempt user authentication with the local password first, then with the RADIUS server, and finally with the TACACS+ server.

To configure authentication order:

  1. Navigate to the top of the configuration hierarchy in either the J-Web or CLI configuration editor.
  2. Perform the configuration tasks described in Table 42.
  3. If you are finished configuring the network, commit the configuration.

    To completely set up RADIUS or TACACS+ authentication, you must configure at least one RADIUS or TACACS+ server and create user template accounts.

  4. Go on to one of the following procedures:

Table 42: Configuring Authentication Order

Task

J-Web Configuration Editor

CLI Configuration Editor

Navigate to the System level in the configuration hierarchy.
  1. In the J-Web interface, select Configuration>View and Edit>Edit Configuration.
  2. Next to System, click Configure or Edit.

From the [edit] hierarchy level, enter

edit system

Add RADIUS authentication to the authentication order.
  1. In the Authentication order box, click Add new entry.
  2. In the list, select radius.
  3. Click OK.

Insert the radius statement in the authentication order:

insert system authentication-order radius after password

Add TACACS+ authentication to the authentication order.
  1. In the Authentication Order box, click Add new entry.
  2. In the list, select tacplus.
  3. Click OK.

Insert the tacplus statement in the authentication order:

insert system authentication-order tacplus after radius

[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

[an error occurred while processing this directive]