User guide

70 Cyclades® CS Console Server Installation, Administration and User Guide
Access
Under Ports - Physical Ports in Expert Mode, select one or more serial ports and click the Modify
Port(s), select the Access form from the tabbed menu. The Access form appears.
To configure user access to serial ports:
Use this procedure if you wish to specify a list of authorized users or groups.
1. Go to Ports - Physical Ports in Expert mode and select a port or ports to modify.
2. Click the Access tab. The Access form appears.
3. To restrict access to one or more users or to a group of users, enter previously defined user or
group names in the Authorized Users/Groups field, with names separated by commas.
4. To deny access to one or more users or groups, preface the user or group names with an
exclamation point (
!).
5. Click Done.
6. Click apply changes.
Authentication methods and fallback mechanism
The following table provides a brief description of the authentication methods. When an
authentication method is configured to be performed by an authentication server such as LDAP,
RADIUS or TACACS+, the user can get access denial if either the authentication server is down or
it does not authenticate. An authentication fallback mechanism can be defined in case the first
authentication level fails.
Table 8.5: Access Form Menu and Fields
Field Description
Authorized Users/Groups Restrict or deny access to a serial port by specifying one or more users
or groups.
You can deny access to one or more users or groups by entering an
exclamation point (!) before the user or group name.
For example, to explicitly deny access to a user called noadmin and enable
access only to a single user called johnd you would enter the following:
!noadmin,johnd. Successive names are separated by a comma.
Type Select an authentication type for the serial port from the pull-down list. The
default is no authentication (Type=None).
Table 8.6: Expert - Authentication Methods and Fallback Mechanisms
Authentication Type Definition
None No authentication.
LDAP Authentication is performed against an LDAP database using an LDAP server.
LDAP/Local LDAP authentication is tried first, switching to Local if unsuccessful.