diff options
| author | aslanvyos <126803786+aslanvyos@users.noreply.github.com> | 2023-09-22 16:33:23 +0400 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-09-22 16:33:23 +0400 |
| commit | 6f8c3035102342d2fca7d7109b35954b7a9c5124 (patch) | |
| tree | 9dd8aa8fcc3a2728b4b1cd0e54d57c6be0574087 | |
| parent | 0013b5700369081ba4638f551797c5c7d918e66e (diff) | |
| download | vyos-documentation-6f8c3035102342d2fca7d7109b35954b7a9c5124.tar.gz vyos-documentation-6f8c3035102342d2fca7d7109b35954b7a9c5124.zip | |
Update login.rst
RADIUS and TACACS configuration examples were added.
Also mentioned if there is no connection between VyOS and RADIUS/TACACS servers users need to use local accounts for authentication.
| -rw-r--r-- | docs/configuration/system/login.rst | 28 |
1 files changed, 28 insertions, 0 deletions
diff --git a/docs/configuration/system/login.rst b/docs/configuration/system/login.rst index bb7bdc86..0cbcecde 100644 --- a/docs/configuration/system/login.rst +++ b/docs/configuration/system/login.rst @@ -275,6 +275,22 @@ Configuration Source all connections to the RADIUS servers from given VRF `<name>`. +Configuration Example +--------------------- + +.. code-block:: none + + set system login radius server 192.168.0.2 key 'test-vyos' + set system login radius server 192.168.0.2 port '1812' + set system login radius server 192.168.0.2 timeout '5' + set system login radius source-address '192.168.0.1' + + + If there is no communication between VyOS and RADIUS server users can + authenticate from local user accounts. During authentication from the local + accounts users can observe some timeouts. Timeout in seconds depends on + the configured timeout option. + .. hint:: If you want to have admin users to authenticate via RADIUS it is essential to sent the ``Cisco-AV-Pair shell:priv-lvl=15`` attribute. Without the attribute you will only get regular, non privilegued, system users. @@ -328,6 +344,18 @@ Configuration Source all connections to the TACACS servers from given VRF `<name>`. +Configuration Example +--------------------- + +.. code-block:: none + + set system login tacacs server 192.168.0.2 key 'test-vyos' + set system login tacacs server 192.168.0.2 port '49' + set system login tacacs source-address '192.168.0.1' + + + If there is no communication between VyOS and TACACS server users can + authenticate from local user accounts. Login Banner ============ |