Add an authentication group

Required configuration items

Additional configuration items

To add an authentication group:



  1. Log into Digi Remote Manager, or log into the local Web UI as a user with full Admin access rights.
  2. Access the device configuration:

    1. Locate your device as described in Use Digi Remote Manager to view and manage your device.
    2. Click the Device ID.
    3. Click Settings.
    4. Click to expand Config.

    1. On the menu, click System. Under Configuration, click Device Configuration.

      The Configuration window is displayed.

  3. Click Authentication > Groups.
  4. For Add, type a name for the group and click .

    The group configuration window is displayed.

  5. Click the following options, as appropriate, to enable or disable access rights for each:
    • Admin access

      For groups assigned Admin access, you can also determine whether the Access level should be Full access or Read-only access.

      where value is either:

      • Full access full: provides users of this group with the ability to manage the EX15 device by using the WebUI or the Admin CLI.
      • Read-only access read-only: provides users of this group with read-only access to the WebUI and Admin CLI.

      The default is Full access full.

    • Serial access
    1. Click Serial ports to expand the Serial ports node.
    2. For Add Port, click .
    3. In the Port dropdown, select a port.
    4. Click again to add additional serial ports.
  7. (Optional) Configure OpenVPN access. See for further information.
    1. Enable captive portal access rights for users of this group by checking the box next to Captive portal access.
    2. Click Captive portals to expand the Captive portal node.
    3. For Add Captive portal, click .
    4. In the Captive portal dropdown, select a captive portal to which users of this group will have access.
    5. Click again to add additional captive portals.
  9. Interactive shell access

    Shell access is not available if the Allow shell parameter has been disabled. See Disable shell access for more information about the Allow shell parameter.

  10. (Optional) Enable users that belong to this group to query the device for Nagios monitoring by checking the box next to Nagios access.
  11. (Optional) Enable users that belong to this group to access the Wi-Fi scanning service by checking the box next to Wi-Fi scanner access.
  12. Click Apply to save the configuration and apply the change.
  1. Select the device in Remote Manager and click Actions > Open Console, or log into the EX15 local command line as a user with full Admin access rights.

    Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  2. At the command line, type config to enter configuration mode:

    > config
(config)>

  3. Use the add auth group command to add a new authentication. For example, to add a group named test:
    (config)> add auth group test
(config auth group test)>
  4. Enable access rights for the group:
    • Admin access:
      (config auth group test)> acl admin enable true
(config)>
    • Set the access level for Admin access:
      (config)> auth group admin acl admin level value
(config)>

      where value is either:

      • full: provides users of this group with the ability to manage the EX15 device by using the WebUI or the Admin CLI.
      • read-only: provides users of this group with read-only access to the WebUI and Admin CLI.

      The default is full.

    • Shell access:
      (config auth group test)> acl shell enable true
(config)>

      Shell access is not available if the Allow shell parameter has been disabled. See Disable shell access for more information about the Allow shell parameter.

    • Serial access:
      (config auth group test)> acl serial enable true
(config)>
    1. Return to the config prompt by typing three periods (...):
      (config auth group test)> ...
(config)>
    2. Enable captive portal access rights for users of this group:
      (config)> auth group test acl portal enable true
(config)>
    3. Add a captive portal to which users of this group will have access:
      1. Determine available portals: 
        (config)> show firewall portal
portal1
	auth none
	enable true
	http redirect
	no interface
	no message
	no redirect_url
	no terms
	timeout 24h
	no title
(config)>
      2. Add a captive portal:
        (config)> add auth group test acl portal portals end portal1
(config)>
  6. (config)> auth group test acl nagios enable true
(config)>
  7. (config)> auth group group test acl wifi_scanner enable true
(config)>
  8. Save the configuration and apply the change.
    (config)> save
Configuration saved.
>
  9. Type exit to exit the Admin CLI.

    Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device.