About TACACS+ Support

Terminal Access Controller Access-Control System Plus (TACACS+) is one of the Authentication, Authorization and Accounting protocols used to authenticate controller administrators. TACACS+ is an extensible AAA protocol that provides customization and future development features, and uses TCP to ensure reliable delivery.

In addition to selecting TACACS+ as the server type, complete the following steps for TACACS+ based authentication to work on the controller.

Edit the TACACS+ configuration file (tac_plus.conf) on the TACACS+ server to include the service user name.

For example,

key = test@1234
accounting file = /var/log/tac_acct.log
user = username {
        member = show
        login = cleartext "password1234!"  
        }
group = show {
        service = super-login {
 user-name = super <<==mapped to the user account in the controller
		               }

On the controller web interface, select Administration >Administration> Admins and Roles > Administrators, and click Create to create an administrator account with super as the user name.

Note: Refer to Creating Administrator Accounts.

Select Administration >Administration> Admins and Roles > Groups and assign an administrator role to the super administrator account.

Note: Refer to Creating User Groups.

When adding a server type for administrators, select TACACS+ as the authentication server type.

Note: Refer to Configuring SZ Admin AAA Servers.

Test the TACACS+ server using the account username@super-login.

RUCKUS SmartZone Security Guide (LT-GD), 6.1.2 800-73527-001 Rev C

About TACACS+ Support