Lantronix EMG 8500 EMG User Guide - Page 292

14: User Authentication Kerberos Kerberos is a network authentication protocol that enables two parties to exchange private information across an unprotected network. It works by assigning a unique electronic credential, called a ticket, to each user who logs on to the network. The ticket is embedded in messages to identify the sender. TACACS+ (Terminal Access Controller Access Control System) TACACS+ allows a remote access server to communicate with an authentication server to determine whether the user has access to the network. TACACS+ is a completely new protocol and is not compatible with TACACS or XTACACS. The EMG supports TACACS+ only. Local Users Local accounts on the EMG unit used to authenticate users who log in using SSH, Telnet, the web, or the console port. 3. To disable a method currently in the Enabled methods list, select the method and click the right arrow between the lists. 4. To set the order in which the EMG unit will authenticate users, use the up arrows to the left of the Enabled methods list. and down 5. For Attempt next method on authentication rejection, you have the following options: - To enable the EMG to use all methods, in order of precedence, until it obtains a successful authentication, select the check box. This is the default. - To enable the EMG unit to use only the first authentication method that responds (in case a server is down or unavailable), clear the check box. Note: When limiting accessibility of the sysadmin login to the physical EMG device, make sure to uncheck Attempt next method on authentication rejection. 6. Click Apply. Now that you have enabled one or more authentication methods, you must configure them. Authentication Commands Go to Authentication Commands to view CLI commands which correspond to the web page entries described above. EMG™ Edge Management Gateway User Guide 292