Specifications

7-13

VPN 3000 Series Concentrator Reference Volume II: Administration and Monitoring

78-13274-01

Chapter 7 Access Rights

Administration | Access Rights | AAA Servers

This section lets you configure AAA servers to authenticate administrators for this VPN Concentrator.

Before you configure a TACACS+ server here, be sure that the server you reference is itself properly

configured and that you know how to access it (IP address or host name, TCP/UDP port,

secret/password, etc.). The VPN Concentrator functions as the client of these servers.

You can configure and prioritize up to 10 TACACS+ servers. The first server of a given type is the

primary server for that type, and the rest are backup servers in case the primary is inoperative.

Note In addition to configuring AAA servers, to use TACACS+ you must set a value in the AAA Access

Level parameter; see Administration | Access Rights | Administrators | Modify.

Caution Misconfiguration of TACACS+ can lock an administrator out of the Concentrator HTML interface.

If that happens, you can access the Concentrator by logging in through the console port, using your

administrator username and password.

Figure 7-7 Administration | Access Rights | AAA Servers Screen

To configures TACACS+ servers, click Authentication--authentication servers.