User guide

TACACS+ Server Configuration
280
Note:IfthereismorethenoneRadiususerrequiringthesame
authorizationontheDominionSX,theFilter‐Idattributeanditsvaluecan
bedefinedatthegrouplevelontheCiscoACSaslongastheseusers
belongtothesamegroup.
TACACS+ Server Configuration
TheDominionSXunithasthecapabilitytouseTerminalAccess
ControllerAccess‐ControlSystemPlus(TACACS+)forauthentication
services.
TheDominionSXrequiresanewservicetobeaddedandtwo
argument‐valuepairstobereturnedbytheserver.Thenewserviceis
calleddominionsx.Thevalidauthorizationparameterisus
er‐group.If
thi
suseristohaveamodemdialback,thevaliddialbackparameteris
user‐dialback.
• user‐group:Specifiesthe usergroupnamethatmatcheswithlocal
grouponDominionSX.Groupnamespecifiedforthisattributeon
TACACS+Mustexactly(casesensitive)matchwithgroupnameon
DominionSXunitorel
s
eauthenticationforTACACS+useron
DominionSXwillfail.
• user‐dialback:Specifiestheuserʹsmodemdialbacknumber.IftheSX
hasdialbackenabled,thisphonenumberwillbeusedtocallbackthe
user.