Configure User Groups in External Authentication Servers

This section describes how to set up RADIUS, TACACS+, and LDAP servers to perform authentication for GigaVUE‑FM, including how to include a local user mapping attribute that GigaVUE‑FM can use to assign user groups to an externally-authenticated user. See the following sections for details:

■

Assign Groups with External Authentication Servers

■

Configure Cisco ACS: RADIUS Authentication

■

Configure Cisco ACS: TACACS+ Authentication

Important:

If users in your deployment require access to the Gigamon Insights UI, you must create those users in the remote authentication server (RADIUS, TACACS+, or LDAP) and assign them the Gigamon Insights Group role. This applies to all supported AAA mechanisms.

■

For TACACS+- and RADIUS-based configurations, set the gigamon:groups attribute to Gigamon Insight Group.

■

For LDAP, map the appropriate remote group to Gigamon Insight Group in the GigaVUE‑FM group mapping configuration.