1.Log into System Management page.

2.In the System Management page, click User Accounts > External Authentication.

3.Click the icon and select Add TACACS+ Authentication from the drop-down list.

1)Enter a unique name to identify the TACACS+ server and a brief description.

2)Enter the credentials to connect to the TACACS+ server. See TACACS+ Server Settings for more details.

3)Assign domain access permissions and more privileges to the users on the TACACS+ server.

▪Tenant Access — select one or more tenants to assign the access permissions to all users on the TACACS+ server.

Tip: The accessible tenants can be modified on the Users tab after the users are synchronized.

▪Domain Access — select one or more domains under an accessible tenant to assign the access permissions to all users on the TACACS+ server.

▪Role — click Assign Roles to assign more domain privileges to all users by role on the TACACS+ server. See Share Policy for more details.

Tip: If all the built-in role can't satisfy your requirement, click Add Role to create one. See Adding a role for more details.

4)To apply the privilege settings to all existing users on the TACACS+ server, click Apply this setting to existing users. Click Yes in the Confirmation dialog box.

5)Click Save to commit the settings.

6)In the pop-up dialog, enter the username and password of any existing users on the TACACS+ server and click Verify to authenticate the connection.

7)Click OK in the pop-up dialog box.

8)By default, the authentication configuration is enabled. To disable it, clear the Enable check box on the External Authentication tab.

After the connection is successfully verified, the users on the TACACS+ server can log into the corresponding domains with the assigned roles and privileges immediately, and they will be synchronized under the Users tab after the login.

TACACS+ Server Settings

The following table lists the credentials that are required when connecting to a TACACS+ server.