Specifications

82 DOMINION SX INSTALLATION AND OPERATIONS MANUAL
TACACS+ Server Configuration
• The Dominion SX requires a new service to be added and two argument-value pairs to be returned by
the server. The new service is called dominionsx. The valid authorization parameters are port-list and
user-type.
• port-list: Specifies the ports that the user has access to. Currently, the only valid value is a space-
separated list of port numbers. Multiple port-list parameters are allowed. All port-list values will be
combined.
• user-type: A string representing the type of Dominion SX user. Currently: Administrator, Operator, and
Observer.
For Dominion SX, both per port Authentication and
Authorization are possible with TACACS+
Cisco Freeware Daemon:
This daemon is freely available from Cisco at http://www.cisco.com.
Many other TACACS+ implementations are also based on the Cisco server.
No special steps are required to add the new service or parameters. Simply place them in the user database
for each user that will be accessing a Dominion SX system. Below is an example of user and group usage:
group = anyone
{
service = dominionsx {
port-list = "1 2 3 4 5"
user-type = observer
}
}
user = tanaka
{
login = cleartext "password"
member = anyone
}
user = proctor
{
login = cleartext "password"
service = dominionsx {
port-list = "1 2 3 4 5 15"
user-type = administrator
}
}