Configuring TACACS+ Authentication and Authorization

AmpCon™-DC supports integrating with the Access Controller Access Control System (TACACS+) server to do authentication and authorization for the AmpCon-DC login users.

In addition to using local users (global users or group users), you can also enable the TACACS+ integration to manage user access.

Before you begin

• You can configure at most two TACACS+ servers on the AmpCon-DC server. One is the primary and active server, while the other one is the secondary server, which is used for backup. If you don’t need backup, no need to configure the secondary TACACS+ server.

• You can designate authorization levels by using the parameter priv-lvl on the TACACS+ server. The priv-lvl configuration will be sent in the TACACS+ authorization response. The priv-lvl is mapped to one of four user local role levels: Readonly, Operator, Admin and Superadmin. You can find the sample configuration of authorization level on TACACS+ server in the xx section.

• If both TACACS+ servers are unreachable, you can use local users (global user or group user) to log in to the AmpCon-DC UI.

• AmpCon-DC sends authorization requests with “Arg[0]” service=AmpCon-DC. On the TACACS+ server, you need to set the value of the parameter “service=AmpCon-DC” to process the authorization request of AmpCon-DC users.

Procedure

To enable the TACACS+ integration, follow these steps:

1. In the AmpCon-DC UI, click System > User management.

2. Click TACACS+ Settings.

3. Click Enable to activate theTACACS+ service. The TACACS+ Settings pop-up window is displayed.

4. Enter the following information:

5. Click OK.