Cisco Systems SN 5428-2 manual

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22

Go to page of

A good user manual

The rules should oblige the seller to give the purchaser an operating instrucion of Cisco Systems SN 5428-2, along with an item. The lack of an instruction or false information given to customer shall constitute grounds to apply for a complaint because of nonconformity of goods with the contract. In accordance with the law, a customer can receive an instruction in non-paper form; lately graphic and electronic forms of the manuals, as well as instructional videos have been majorly used. A necessary precondition for this is the unmistakable, legible character of an instruction.

What is an instruction?

The term originates from the Latin word „instructio”, which means organizing. Therefore, in an instruction of Cisco Systems SN 5428-2 one could find a process description. An instruction's purpose is to teach, to ease the start-up and an item's use or performance of certain activities. An instruction is a compilation of information about an item/a service, it is a clue.

Unfortunately, only a few customers devote their time to read an instruction of Cisco Systems SN 5428-2. A good user manual introduces us to a number of additional functionalities of the purchased item, and also helps us to avoid the formation of most of the defects.

What should a perfect user manual contain?

First and foremost, an user manual of Cisco Systems SN 5428-2 should contain:
- informations concerning technical data of Cisco Systems SN 5428-2
- name of the manufacturer and a year of construction of the Cisco Systems SN 5428-2 item
- rules of operation, control and maintenance of the Cisco Systems SN 5428-2 item
- safety signs and mark certificates which confirm compatibility with appropriate standards

Why don't we read the manuals?

Usually it results from the lack of time and certainty about functionalities of purchased items. Unfortunately, networking and start-up of Cisco Systems SN 5428-2 alone are not enough. An instruction contains a number of clues concerning respective functionalities, safety rules, maintenance methods (what means should be used), eventual defects of Cisco Systems SN 5428-2, and methods of problem resolution. Eventually, when one still can't find the answer to his problems, he will be directed to the Cisco Systems service. Lately animated manuals and instructional videos are quite popular among customers. These kinds of user manuals are effective; they assure that a customer will familiarize himself with the whole material, and won't skip complicated, technical information of Cisco Systems SN 5428-2.

Why one should read the manuals?

It is mostly in the manuals where we will find the details concerning construction and possibility of the Cisco Systems SN 5428-2 item, and its use of respective accessory, as well as information concerning all the functions and facilities.

After a successful purchase of an item one should find a moment and get to know with every part of an instruction. Currently the manuals are carefully prearranged and translated, so they could be fully understood by its users. The manuals will serve as an informational aid.

Table of contents for the manual

  • Page 1

    CH A P T E R 9-1 Cisco SN 5428-2 Storage Router Software Configuration Guide OL-5239-01 9 Configuring Authentication This chapter e xplains ho w to conf igure the authenticat ion portion of Cisco ’ s authenti cation, authorization and acco unting (AAA) services on t he SN 5428-2 Storage Router an d how t o configur e Enable, Login and iSCS I auth[...]

  • Page 2

    9-2 Cisco SN 5428-2 Storage Router Software Configuration Guide OL-5239-01 Chapter 9 Configuring Authentication Prerequisite Tasks Prerequisite Tasks Before performing AAA conf iguration tasks on the storage router , mak e sure you ha ve conf igured system parameters as described in Chapter 2, “First-T ime Conf iguration, ” or Chapter 3, “Con[...]

  • Page 3

    9-3 Cisco SN 5428-2 Storage Router Software Configuration Guide OL-5239-01 Chapter 9 Configuring Authentication Using Authentication Enable Authentication When configured, a user enters pa ssword i nformation each time the CLI enable command is entered from the management console, or f rom a T e lnet or SSH management session. If the storage rou te[...]

  • Page 4

    9-4 Cisco SN 5428-2 Storage Router Software Configuration Guide OL-5239-01 Chapter 9 Configuring Authentication Configuration Tasks Configuration Tasks T o configure iSCSI, Enable or Login authentication and the associated authenti cation services on the storage router , perform the following steps: Step 1 Config ure the desired authenticat ion ser[...]

  • Page 5

    9-5 Cisco SN 5428-2 Storage Router Software Configuration Guide OL-5239-01 Chapter 9 Configuring Authentication Configuration Tasks Figur e 9-1 iSCSI A uthenticati on Configuration Elements iSCSI drivers SN 5428-2 Storage Router . . . . . . . . . . . . . . . . Username database AAA authentication services Authentication services lists RADIUS T A CA[...]

  • Page 6

    9-6 Cisco SN 5428-2 Storage Router Software Configuration Guide OL-5239-01 Chapter 9 Configuring Authentication Configuration Tasks Figur e 9-2 iSCSI A uthenticati on Example Configuration SN 5428-2 Storage Router Username database AAA authentication services Remote RADIUS servers IP 10.5.0.61 IP 10.6.0.53 Global K ey: rad123SN Remote T A CACS+ ser[...]

  • Page 7

    9-7 Cisco SN 5428-2 Storage Router Software Configuration Guide OL-5239-01 Chapter 9 Configuring Authentication Configuration Tasks Figure 9-3 illu strates AAA configuration elements used fo r Enable authentication with RADIUS servers, Figure 9-4 illu strates AAA configurati on elements used for Enable authenti cation with T A CACS+ servers, and Fi[...]

  • Page 8

    9-8 Cisco SN 5428-2 Storage Router Software Configuration Guide OL-5239-01 Chapter 9 Configuring Authentication Configuration Tasks Figur e 9-4 Enable A uthentication Configur ation Elements with T A CACS+ Serv ers SN 5428-2 Storage Router AAA authentication services Authentication services list T A CACS+ Enab le CLI command session processor Monit[...]

  • Page 9

    9-9 Cisco SN 5428-2 Storage Router Software Configuration Guide OL-5239-01 Chapter 9 Configuring Authentication Configuration Tasks Figur e 9-5 Enable A uthentication Example Configur ation SN 5428-2 Storage Router AAA authentication services T A CACS+ Enab le CLI command session processor Monitor Administrator pass word: ciscoadmin T elnet, SSH or[...]

  • Page 10

    9-10 Cisco SN 5428-2 Storage Router Software Configuration Guide OL-5239-01 Chapter 9 Configuring Authentication Configuration Tasks Figure 9-6 illu strates AAA config uration elements used for Login aut hentication and Figur e 9-7 illustrates the e xample configuration of Login authenti cation and the auth entication services u sed in this chapter[...]

  • Page 11

    9-11 Cisco SN 5428-2 Storage Router Software Configuration Guide OL-5239-01 Chapter 9 Configuring Authentication Configuration Tasks Figur e 9-7 Login A uthentication Example Configur ation SN 5428-2 Storage Router AAA authentication services RADIUS T A CACS+ Enable CLI command session processor Monitor T elnet, SSH or console management session Re[...]

  • Page 12

    9-12 Cisco SN 5428-2 Storage Router Software Configuration Guide OL-5239-01 Chapter 9 Configuring Authentication Configuring Authenticatio n Services Configuring Authentication Services Config uring authentication services con sists of setting the approp riate parame ters for the v arious AAA service options that can be used b y the storage router [...]

  • Page 13

    9-13 Cisco SN 5428-2 Storage Router Software Configuration Guide OL-5239-01 Chapter 9 Configuring Authentication Configuring Authen tication Services TACACS+ Hosts Use the commands in the foll owing pro cedure to conf igure T A CACS+ auth entication services. Local Username Database Use the commands in the foll owing pro cedure to configu re a loca[...]

  • Page 14

    9-14 Cisco SN 5428-2 Storage Router Software Configuration Guide OL-5239-01 Chapter 9 Configuring Authentication Configuring Authenticatio n Services The follo wing rules apply to passw ords: • Passw ords are entered in clear text. Ho wev er , th ey are changed to “XXX XX” in the CLI comman d history cache, and are stored in the local usernam[...]

  • Page 15

    9-15 Cisco SN 5428-2 Storage Router Software Configuration Guide OL-5239-01 Chapter 9 Configuring Authentication Creating Named Server Groups Creating Named Server Groups By default, yo u can use all config ured RADIUS or T A CACS+ serv ers for authentication. All conf igured RADIUS server s belong to the def ault group named radiu s. A ll conf igu[...]

  • Page 16

    9-16 Cisco SN 5428-2 Storage Router Software Configuration Guide OL-5239-01 Chapter 9 Configuring Authentication Creating Authentication Lists Creating Authentication Lists iSCSI, Enable and Login authentication use lists of defined authen tication services to administer security functions. The list that is created for Enab le and Log in authentic [...]

  • Page 17

    9-17 Cisco SN 5428-2 Storage Router Software Configuration Guide OL-5239-01 Chapter 9 Configuring Authentication Creating Authentication Lists Enable authentication Use the commands in the fol lowin g procedure to b uild a defa ult list of authentication services to be used for Enable aut henticatio n. Buildi ng the default list comple tes the con [...]

  • Page 18

    9-18 Cisco SN 5428-2 Storage Router Software Configuration Guide OL-5239-01 Chapter 9 Configuring Authentication Testing Authentication Testing Authentication Y o u can perform authentication test ing at any time. For e xample, befo re enabling iSCS I authentic ation for a SCSI routing instan ce, you can test iSCSI auth entication. The user name an[...]

  • Page 19

    9-19 Cisco SN 5428-2 Storage Router Software Configuration Guide OL-5239-01 Chapter 9 Configuring Authentication Configuring Two-Way Authentication Login Authentication Use the commands in the foll owing proc edure to test Logi n authentication. Example 9-3 T esti ng Login A uthentication *[SN5428-2-MG1]# aaa test authentication login default sysmo[...]

  • Page 20

    9-20 Cisco SN 5428-2 Storage Router Software Configuration Guide OL-5239-01 Chapter 9 Configuring Authentication Enabling iSCSI Authentication Enabling iSCSI Authentication iSCSI authentication is enabled for specific SCSI rout ing instances. By defa ult, iSCSI authentication is not enabled. Use the commands in the foll owing procedure to enable iS[...]

  • Page 21

    9-21 Cisco SN 5428-2 Storage Router Software Configuration Guide OL-5239-01 Chapter 9 Configuring Authentication Verifying and Saving Config uration Example 9-4 Display AAA Configur ation [SN5428-2-MG1]# show aaa aaa new-model username "labserver" password "9 491c083a73d7f89bc0205927d086cdd0d8" username "labserver2" pa[...]

  • Page 22

    9-22 Cisco SN 5428-2 Storage Router Software Configuration Guide OL-5239-01 Chapter 9 Configuring Authentication Verifying and Saving Configur ation[...]