TP-Link T1500-28TC TL-SL2428 T1500-28TCUN V1 Configuration Guide - Page 464

Configuring Network Security AAA Configuration 7.1.6 Configuring Login Account and Enable Password The login account and Enable password can be configured locally on the switch or centrally on the RADIUS/TACACS+ server(s).  On the Switch The local username and password for login can be configured in the User Management feature. For details, refer to Managing System. To configure the local Enable password for getting administrative privileges, choose the menu Network Security > AAA > Global Config to load the following page. Figure 7-9 Configure Enable Password Specify the Enable password in the Enable Admin section, and click Apply. Tips: The logged-in guests can enter the Enable password on this page to get administrative privileges.  On the Server The accounts created by the RADIUS/TACACS+ server can only view the configurations and some network information without the Enable password. Some configuration principles on the server are as follows:  For Login authentication configuration, more than one login account can be created on the server. Besides, both the user name and password can be customized.  For Enable password configuration: On RADIUS server, the user name should be set as $enable$, and the Enable password is customizable. All the users trying to get administrative privileges share this Enable password. On TACACS+ server, configure the value of "enable 15" as the Enable password in the configuration file. All the users trying to get administrative privileges share this Enable password. Configuration Guide 443