Versionen im Vergleich

Alte Version 4

changes.mady.by.user LANCOM Redaktion

Gespeichert am

verglichen mit

Neue Version Aktuell

changes.mady.by.user LANCOM Redaktion

Gespeichert am

Schlüssel

  • Diese Zeile wurde hinzugefügt.
  • Diese Zeile wurde entfernt.
  • Formatierung wurde geändert.

...

Deutsch

Beschreibung:

Mit dem folgenden Add-in Skript können Sie TACACS+ auf LANCOM Switches der GS-2xxx Serie konfigurieren.

Liste der verwendeten Variablen:

VariableBeschreibung




Add-in Code:

/**
 * @param {Config} config
 * @param {Context} context
 * Do not edit this comment or parameter types. Required for code suggestions
*/
exports.main = function (config, context) {
    //

Function to create VRRP Entry

Tacacs Server Funtion
    var

addVRRPEntry

addTACACSsrv = function (

routerID

ServerNumber,

routerIP

OnOff,

mainPrio

IPorHost,

backupPrio

Port,

remoteSite, comment

Secret) {
        var

table1

Table_

2_8_21_2

TACACS_Server = config.getTableByOid("1.

2

3.

8

10.

21.2

5");
        var

table

Table_

1

TACACS_

2_8_21_2_row_1 = table1_2_8_21_2

Server_row = Table_TACACS_Server.createNewRow();
       

table

Table_

1

TACACS_

2_8_21_2_row_1

Server_row.setByOid("1",

routerID

ServerNumber); // 1 - 5
       

table

Table_

1_2_8_21_2_row_1

TACACS_Server_row.setByOid("2",

routerIP

OnOff);
       

table

Table_

1_2_8_21_2

TACACS_Server_row

_1

.setByOid("3",

mainPrio

IPorHost);
       

table

Table_

1_2_8_21_2

TACACS_Server_row

_1

.setByOid("4",

backupPrio

Port); // Default Port 49
       

table

Table_

1_2_8_21_2

TACACS_Server_row

_1

.setByOid("5",

remoteSite

Secret);
       

table

Table_

1_2_8_21_2_row_1.setByOid(6, comment

TACACS_Server.addOrMerge(Table_TACACS_Server_row);
    };
    //AuthMethod Function
    var authMethod = function (AuthMethod, AuthFallback) {
        config.setScalarByOid(AuthMethod, "3");
       

table1_2_8_21_2.addOrMerge(table_1_2_8_21_2_row_1

config.setScalarByOid(AuthFallback, "1");
    };
    //

If Statement to only create VRRP Entry, if device has the variable VRRP_Prio

Enable TACACS+ Authorization globally
   

if (context.vars.VRRP_PRIO != "") {
   

config.setScalarByOid("1.3.10.2.1", "1");
    //Enable TACACS+ Fallback
    config.setScalarByOid("1.

2

3.

8

10.

21

2.

1

2", "1");
    // Configure TACACS+ Server
   

// Function Call to create a new Entry
        addVRRPEntry("1", "10.10.10.254", context.vars.VRRP_PRIO, "0", "INTERNET", "");
    }

addTACACSsrv(ServerNumber, OnOff, IPorHost, Port, Secret); // Replace with actual Values
    // Configure Authentication Methods for Interfaces
    //AuthMethod Variable
    var tftpAuth = "1.3.9.9"
    var tftpFallback = "1.3.9.10"
    var consoleAuth = "1.3.9.1"
    var consoleFallback = "1.3.9.2"
    var telnetAuth = "1.3.9.3"
    var telnetFallback = "1.3.9.4"
    var sshAuth = "1.3.9.5"
    var sshFallback = "1.3.9.6"
    //Auth Method Example - Replace with AuthMethod and Fallback for each Interface
    authMethod(AuthMethod, AuthFallback);
    // Manual Configuration for HTTP and HTTPS
    /* - Remove for this Line for use -
    config.addScriptLine("auth");
    config.addScriptLine("fallback http enable");
    config.addScriptLine("method http tacacs+ ");
    config.addScriptLine("fallback https enable");
    config.addScriptLine("method https tacacs+ ");
    config.addScriptLine("exit");
    - Remove for this Line for use - */
};

Add-in als JSON-Datei:

View file
namestatic-IP-GS-3xxx.json
height150


With the following Addin Add-in script you can configure TACACS+ on LANCOM Switches of the GS-2xxx series.

List of used variables:

Englisch

Description:

Used variables:

Variable

Description
VariableDescription




 Add-in code:

/**


 *

@param

{Config}

config


 *

@param

{Context}

context


 *

Do

not

edit

this

comment

or

parameter

types.

Required

for

code

suggestions


*/


exports.main

=

function

(config,

context)

{

{
    //Tacacs

Server

Funtion var addTACACSsrv = function

Funtion
    var addTACACSsrv = function (ServerNumber,

OnOff,

IPorHost,

Port,

Secret)

{ var

{
        varTable_TACACS_Server

=

config.getTableByOid("1.3.10.5");

var


        varTable_TACACS_Server_row

=

Table_TACACS_Server.createNewRow();


        Table_TACACS_Server_row.setByOid("1",

ServerNumber);

//

1

-

5

5
        Table_TACACS_Server_row.setByOid("2",

OnOff);


        Table_TACACS_Server_row.setByOid("3",

IPorHost);


        Table_TACACS_Server_row.setByOid("4",

Port);

//

Default

Port

49

49
        Table_TACACS_Server_row.setByOid("5",

Secret);


        Table_TACACS_Server.addOrMerge(Table_TACACS_Server_row);

};


    };
    //AuthMethod

Function var authMethod = function

Function
    var authMethod = function (AuthMethod,

AuthFallback)

{

{
        config.setScalarByOid(AuthMethod,

"3");


        config.setScalarByOid(AuthFallback,

"1");

};


    };
    //Enable

TACACS+

Authorization

globally

globally
    config.setScalarByOid("1.3.10.2.1",

"1");


    //Enable

TACACS+

Fallback

Fallback
    config.setScalarByOid("1.3.10.2.2",

"1");


    //

Configure

TACACS+

Server

Server
    addTACACSsrv(ServerNumber,

OnOff,

IPorHost,

Port,

Secret);

//

Replace

with

actual

Values

Values
    //

Configure

Authentication

Methods

for

Interfaces

Interfaces
    //AuthMethod

Variable var tftpAuth =

Variable
    var tftpAuth = "1.3.9.9"

var tftpFallback =


    var tftpFallback = "1.3.9.10"

var consoleAuth =


    var consoleAuth = "1.3.9.1"

var consoleFallback =


    var consoleFallback = "1.3.9.2"

var telnetAuth =


    var telnetAuth = "1.3.9.3"

var telnetFallback =


    var telnetFallback = "1.3.9.4"

var sshAuth =


    var sshAuth = "1.3.9.5"

var sshFallback =


    var sshFallback = "1.3.9.6"


    //Auth

Method

Example

-

Replace

with

AuthMethod

and

Fallback

for

each

Interface

Interface
    authMethod(AuthMethod,

AuthFallback);


    //

Manual

Configuration

for

HTTP

and

HTTPS

HTTPS
    /*

-

Remove

for

this

Line

for

use

-

-
    config.addScriptLine("auth");


    config.addScriptLine("fallback

http

enable");


    config.addScriptLine("method

http

tacacs+

");


    config.addScriptLine("fallback

https

enable");


    config.addScriptLine("method

https

tacacs+

");


    config.addScriptLine("exit");

- Remove for this Line for use - */


    - Remove for this Line for use - */

};

Add-in as JSON file:

View file
namestatic-IP-GS-3xxx.json
height150

...