BSGX4e Business Gateway User Guide 75
Release 01.01 NN47928-102
User Management
3. The user account and its password must be defined on the external TACACS+
server.
NOTE: Disabling its authentication record suspends TACACS+ authentication
for a user account. This prevents logins by the user account until either
its authentication record is re-enabled or its authentication method
(auth value) is changed.
TACACS+ Authentication Records
For each user account configured to use TACACS+ authentication, a TACACS+
authentication record must be configured. The authentication record for a user
account serves two purposes:
It specifies the TACACS+ server that authenticates the account by providing:
n the name or address of the TACACS+ server (server).
n the key that the client shares with the server (key).
It enables or disables TACACS+ authentication for the account.
NOTE: Deleting the user account also deletes its authentication record.
Every authentication record that references the same TACACS+ server specifies the
same server and key values.
To configure a TACACS+ authentication record, enter the command:
> config tacplus client
Table 21 describes the parameters for config tacplus client.
Example of Configuring a TACACS+ Authentication Record
This example creates an authentication record for user account TACuser. It assumes
that the user account TACuser has been configured and TACACS+ has been specified
as its authentication method, as shown in the following display:
Table 21. TACACS+ Authentication Record Parameters
Parameter Description
[user] Name of the user account to which the authentication record
applies. To use the authentication record, the user account must
specify TACACS+ authentication.
enabled Whether the TACACS+ client is enabled for the user. The default is
no.
server IP address or FQDN of the TACACS+ server that the client
references.
key Shared key for the client as determined by the server. If the key
includes a space character, enclose the key value in double-quote
characters(“ “)
