ZyXEL Communications MES-2110 Guide de l'utilisateur télécharger pdf (Page 71)

Chapter 9 802.1x

MES-2110 User’s Guide

9.6 Technical Reference

This section provides technical background information about the topics covered in

this chapter.

9.6.1 RADIUS and TACACS+

RADIUS and TACACS+ are security protocols used to authenticate users by means

of an external server instead of (or in addition to) an internal device user database

that is limited to the memory capacity of the device. In essence, RADIUS and

TACACS+ authentication both allow you to validate an unlimited number of users

from a central location.

The following table describes some key differences between RADIUS and

TACACS+.

9.6.2 Supported RADIUS Attributes

Remote Authentication Dial-In User Service (RADIUS) attributes are data used to

define specific authentication, and accounting elements in a user profile, which is

stored on the RADIUS server. This appendix lists the RADIUS attributes supported

by the Switch.

Guest VLAN This shows if a Guest VLAN is enabled on the port.

Reauthenticat

ion

This shows if a subscriber has to periodically re-enter his or her username

and password to stay connected to the port.

Reauth-Period This shows how often (in minutes) a client has to re-enter his or her

username and password to stay connected to the port.

Undo Click this to restore your last saved settings.

Apply

Click this to save your changes.

Table 17 Configuration > 802.1x Status (continued)

LABEL DESCRIPTION

Table 18 RADIUS vs. TACACS+

RADIUS TACACS+

Transport

Protocol

UDP (User Datagram Protocol) TCP (Transmission Control Protocol)

Encryption Encrypts the password sent for

authentication.

All communication between the client

(the Switch) and the TACACS server

is encrypted.

1 2 ... 66 67 68 69 70 71 72 73 74 75 76 ... 183 184

Pas de commentaire

ZyXEL Communications MES-2110 Guide de l'utilisateur Page 71