Configure administrator authentication from this window (Configuration > User Management > Setup). All three authentication options (Radius, Tacacs+ and Local) use a numeric system with these values:
| 8 | Operator is the lowest authentication level and also the default. Operators can see statistics and results but cannot make any configuration changes. |
| 5 | Admininstrators can do general configuration changes, but cannot upgrade APs or controllers, nor can they upgrade System Director versions using Telnet. The cannot configure an NMS server, NTP server, change the system password, date or time (all CLI). They cannot create local admins, a new feature in release 4.1, nor can they set the authentication mode for a controller (GUI and CLI). Administrators cannot add or remove licensing |
| 2 |
Super Admininstrators can perform all configurations on the controller. They are the only ones who can upgrade APs or controllers and they can upgrade System Director versions using Telnet. The can configure an NMS server, NTP server, system password, date and time (all CLI). They can also create local admins, a new feature in release 4.1, and set the authentication mode for a controller (GUI and CLI). Superusers can add and remove licensing. |
The Radius tab is selected by default. Provide these parameters, and then click OK.
| Authentication Type | Radius |
| Primary Radius IP Address | IP address of the primary Radius server |
| Primary Radius Port | Default primary Radius port is 1812, but 1024-65535 is valid |
| Primary Radius Secret Key | Password for primary Radius server |
| Secondary Radius IP Address | Optional IP address of the secondary Radius server |
| Secondary Radius Port | Port 1024-65535 is valid |
| Secondary Radius Secret Key | Password for secondary Radius server |
Click the Tacacs+ tab, provide these parameters, and then click OK.
| Authentication Type | Tacacs+ |
| Primary Tacacs+ IP Address | IP address of the primary Tacacs+ server |
| Primary Tacacs+ Port | Default port is 49, but 0-65535 is valid |
| Primary Tacacs+ Secret Key | Password for primary Tacacs+ server |
| Secondary Tacacs+ IP Address | Optional IP address of the secondary Radius server |
| Secondary Tacacs+ Port | Port 0-65535 is valid |
| Secondary Tacacs+ Secret Key | Password for secondary Tacacs+ server |
Click the Local Admins tab> Add > provide these parameters, and then click OK.
| User Name | |
| Password | |
| Privilege Level | 8, 5, or 3 (see description above) |