TP-Link T1600G-28PS Jetstream Smart Switches User Guide - Page 641

Configuring AAA AAA Configuration 2.1.5 Configuring Login Account and Enable Password The login account and Enable password can be configured locally on the switch or centrally on the RADIUS/TACACS+ server(s). ■■ On the Switch The local username and password for login can be configured in the User Management feature. For details, refer to Managing System. To configure the local Enable password for getting administrative privileges, choose the menu SECURITY > AAA > Global Config to load the following page. Figure 2-8 Configure Enable Password There are two options: Clear Password and Set Password. You can choose whether the local Enable password is required when the guests try to get administrative privileges. Click Apply. Tips: The logged-in guests can enter the local Enable password on this page to get administrative privileges. ■■ On the Server The accounts created by the RADIUS/TACACS+ server can only view the configurations and some network information without the Enable password. Some configuration principles on the server are as follows: ■■ For Login authentication configuration, more than one login account can be created on the server. Besides, both the user name and password can be customized. ■■ For Enable password configuration: On RADIUS server, the user name should be set as $enable$, and the Enable password is customizable. All the users trying to get administrative privileges share this Enable password. On TACACS+ server, configure the value of "enable 15" as the Enable password in the configuration file. All the users trying to get administrative privileges share this Enable password. User Guide 616