IX15 user authentication

User authentication on the IX15 has the following features and default configuration:

Feature Description Default configuration
Idle timeout

Determines how long a user session can be idle before the system automatically disconnects.

See Set the idle timeout for IX15 users.

  • 10 minutes
Allow shell

If disabled, prevents all authentication prohibits access to the shell prompt for all authentication groups. This does not prevent access to the Admin CLI.

See Disable shell access.

Note If shell access is disabled, re-enabling it will erase the device's configuration and perform a factory reset.

  • Enabled

Methods

Determines how users are authenticated for access:

  • local users

Groups

Associates access permissions for a group. You can modify the released groups and create additional groups as needed for your site. A user can be assigned to more than one group.

See Authentication groups.

  • admin: Provides the logged-in user with administrative and shell access.
  • serial: Provides the logged-in user with access to serial ports.

Users

Defines local users for the IX15.

See Local users.

  • admin: Belongs to both the admin and serial groups.
TACACS+

Configures support for TACACS+ (Terminal Access Controller Access-Control System Plus) servers and users.

See Terminal Access Controller Access-Control System Plus (TACACS+)

  • Not configured

RADIUS

Configures support for RADIUS (Remote Authentication Dial-In User Service) servers and users.

See Remote Authentication Dial-In User Service (RADIUS)

  • Not configured

LDAP

Configures support for LDAP (Lightweight Directory Access Protocol) servers and users.

See LDAP.

  • Not configured

Serial

Configures authentication for serial TCP and autoconnect services.

  • Not configured