ZyXEL Communications GS3700 Series Guide de l'utilisateur télécharger pdf (Page 210)

100

101

Chapter 23 AAA

GS3700/XGS3700 Series User’s Guide

210

23.1.2 RADIUS and TACACS+

RADIUS and TACACS+ are security protocols used to authenticate users by means of an external

server instead of (or in addition to) an internal device user database that is limited to the memory

capacity of the device. In essence, RADIUS and TACACS+ authentication both allow you to validate

an unlimited number of users from a central location.

The following table describes some key differences between RADIUS and TACACS+.

23.2 AAA Screens

The AAA screens allow you to enable authentication, authorization, accounting or all of them on the

Switch. First, configure your authentication and accounting server settings (RADIUS, TACACS+ or

both) and then set up the authentication priority, activate authorization and configure accounting

settings.

Click Advanced Application > AAA in the navigation panel to display the screen as shown.

Figure 128 Advanced Application > AAA

23.2.1 RADIUS Server Setup

Use this screen to configure your RADIUS server settings. See Section 23.1.2 on page 210 for more

information on RADIUS servers and Section 23.3 on page 218 for RADIUS attributes utilized by the

Table 95 RADIUS vs TACACS+

RADIUS TACACS+

Transport Protocol UDP (User Datagram Protocol) TCP (Transmission Control Protocol)

Encryption Encrypts the password sent for

authentication.

All communication between the client (the

Switch) and the TACACS server is encrypted.

1 2 ... 205 206 207 208 209 210 211 212 213 214 215 ... 415 416

Commentaires sur ces manuels

Pas de commentaire

ZyXEL Communications GS3700 Series Guide de l'utilisateur Page 210

Commentaires sur ces manuels