1
Configure AAA
For Releases 16.1R2 and later, except as noted in the “Software Release Information” section.
This article describes how to configure authentication, authorization, and accounting (AAA) for users who access
FlexVNF devices.
Authentication identifies users to determine whether they are allowed to access a FlexVNF device, the network, and
related services. To authenticate a user, you can use an internal or an external user database. The external database
can be on a RADIUS or TACACS+ server.
After a user is authenticated on a FlexVNF device, each user action that they perform must be authorized. Authorization
is the method for remote access control, including one-time authorization and service authorization based on user or
user account and profile. The FlexVNF software provisions three user types, or roles—System, Tenant, and Remote—
that determine the access level for individual users. When you create a user, you assign them to the desired role.
Authorization uses a database to define the authorization methods. The database can be located locally on the access
server or on a router, or it can be hosted remotely on a RADIUS or TACACS+ server. The authorization process
assembles a set of attributes that describe what the user is authorized to perform, compares them to the information in
the authorization database, and then returns to AAA the user's permissions and restrictions.
Accounting collects and sends security server information that is used for billing, auditing, and reporting, such as user
identities, start and stop times, executed commands (such as PPP), number of packets, and number of bytes. The
accounting information allows you to track the services that users are accessing and the amount of network resources
they are consuming.
Configure TACACS+
TACACS+ provides detailed accounting information and flexible administrative control over authentication and
authorization processes.
To configure TACACS+:
1. In Director view, select Workflows > Templates.
2. Click the
Add icon to add a template, or select a template to edit it.
3. In the Create Template popup window, select the Management Servers tab. Enter information for the following
fields:
