Home » Netgear Manuals » Hubs & Switches » Netgear M5300-52G3 » Manual Viewer

Netgear M5300-52G3 Web Management User Guide - Page 364

Configuring TACACS+, Authentication

Add to My Manuals
Save this manual to your list of manuals

Page 364 highlights

ProSafe M5300 Switch Field Accounting Server Address Round Trip Time(secs) Accounting Requests Accounting Retransmissions Accounting Responses Malformed Accounting Responses Bad Authenticators Pending Requests Timeouts Unknown Types Packets Dropped Description Identifies the accounting server associated with the statistics. Displays the time interval, in hundredths of a second, between the most recent Accounting-Response and the Accounting-Request that matched it from this RADIUS accounting server. Displays the number of RADIUS Accounting-Request packets sent not including retransmissions. Displays the number of RADIUS Accounting-Request packets retransmitted to this RADIUS accounting server. Displays the number of RADIUS packets received on the accounting port from this server. Displays the number of malformed RADIUS Accounting-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators and unknown types are not included as malformed accounting responses. Displays the number of RADIUS Accounting-Response packets that contained invalid authenticators received from this accounting server. Displays the number of RADIUS Accounting-Request packets sent to this server that have not yet timed out or received a response. Displays the number of accounting timeouts to this server. Displays the number of RADIUS packets of unknown type that were received from this server on the accounting port. Displays the number of RADIUS packets that were received from this server on the accounting port and dropped for some other reason. Configuring TACACS+ TACACS+ provides a centralized user management system, while still retaining consistency with RADIUS and other authentication processes. TACACS+ provides the following services: • Authentication: Provides authentication during login and via user names and user-defined passwords. • Authorization: Performed at login. When the authentication session is completed, an authorization session starts using the authenticated user name. The TACACS+ server checks the user privileges. The TACACS+ protocol ensures network security through encrypted protocol exchanges between the device and TACACS+ server. Managing Device Security 364

Section	Page
ProSafe M5300 Switch	1
Contents	3
1. Getting Started	9
Switch Management Interface	9
Web Access	9
Understanding the User Interfaces	10
Using the Web Interface	10
Interface Naming Convention	17
2. Configuring System Information	19
Management	19
System Information	20
Switch Statistics	24
System CPU Status	26
Slot Information	27
Loopback Interface	29
Network Interface	30
Time	34
DNS	40
SDM Template Preference	42
License	43
License Key	43
License Features	44
Services	45
DHCP Server	45
DHCP Relay	53
DHCP L2 Relay	54
UDP Relay	57
DHCPv6 Server	59
DHCPv6 Relay	66
Stacking	68
Stack Features	68
Firmware Synchronization and Upgrade	69
Configuration Maintenance	69
Stack Master Election	70
Factory Defaults Reset Behavior	70
Nonstop Forwarding	71
Stack Configuration	72
Stack Port Configuration	74
Stack Port Diagnostics	76
Stack Firmware Synchronization	77
NSF	78
Checkpoint Statistics	80
PoE (M5300-28G-POE+ and M5300-52G-POE+ Only)	82
Basic PoE Configuration	83
PoE Port Configuration	84
SNMP	87
SNMPV1/V2	87
SNMP V3 User Configuration	92
LLDP	93
LLDP	93
LLDP-MED	100
ISDP	109
ISDP Global Configuration	109
Advanced ISDP Configuration	110
Timer Schedule	114
Timer Global Configuration	114
Timer Schedule Configuration	115
3. Configuring Switching Information	119
VLANs	119
Basic	120
Advanced	122
Auto-VoIP Configuration	134
Protocol-Based	134
OUI-Based	136
iSCSI	139
Basic	139
Advanced	141
Spanning Tree Protocol	143
Basic	143
Advanced	145
Multicast	156
MFDB	156
IGMP Snooping	158
MLD Snooping	167
MVR Configuration	173
Basic	173
Advanced	174
Address Table	177
Basic	177
Advanced	179
Ports	181
Port Configuration	181
Port Description	182
Link Aggregation Groups	184
LAG Configuration	184
LAG Membership	186
4. Routing	189
Routing Table	189
Basic	190
Advanced	192
IP	193
Basic	193
Advanced	197
IPv6	201
Basic	201
Advanced	204
VLAN	218
VLAN Routing Wizard	218
VLAN Routing Configuration	219
ARP	220
Basic	221
Advanced	221
RIP	225
Basic	225
Advanced	226
OSPF	232
Basic	232
Advanced	233
OSPFv3	257
Basic	257
Advanced	258
Router Discovery	279
Router Discovery Configuration	279
VRRP	280
Basic	280
Advanced	282
Multicast	286
Mroute Table	287
Multicast Global Configuration	288
Multicast Interface Configuration	289
DVMRP	290
IGMP	296
PIM	304
Static Routes Configuration	311
Admin Boundary Configuration	312
IPv6 Multicast	313
Mroute Table	313
IPv6 PIM	314
MLD	321
Static Routes Configuration	329
5. Configuring Quality of Service	331
Class of Service	331
Basic	332
Advanced	333
Differentiated Services	339
DiffServ Wizard	340
Basic	341
Advanced	343
6. Managing Device Security	355
Management Security Settings	355
Local User	356
Enable Password Configuration	358
Line Password Configuration	358
RADIUS	359
Configuring TACACS+	364
Authentication List Configuration	366
Login Sessions	371
Configuring Management Access	372
HTTP	372
HTTPS	373
SSH	377
Telnet	380
Console Port	381
Denial of Service	382
Access Control	384
Port Authentication	386
Basic	387
Advanced	389
Traffic Control	397
MAC Filter	397
Port Security	399
Private Group	404
Protected Ports Configuration	406
Private VLAN	407
Storm Control	412
Control	414
DHCP Snooping	414
IP Source Guard	419
Dynamic ARP Inspection	421
Captive Portal	426
Configuring Access Control Lists	435
ACL Wizard	435
Basic	437
Advanced	441
7. Monitoring the System	457
Ports	457
Port Statistics	458
Port Detailed Statistics	459
EAP Statistics	466
Cable Test	467
Logs	468
Buffered Logs	469
Command Log Configuration	470
Console Log Configuration	471
SysLog Configuration	471
Trap Logs	472
Event Logs	474
Persistent Logs	476
Port Mirroring	477
Multiple Port Mirroring	477
sFlow	479
Basic	479
Advanced	480
8. Maintenance	483
Save Configuration	483
Save Configuration	483
Auto Install Configuration	484
Reset	485
Device Reboot	485
Factory Default	486
Password Reset	486
Upload File From Switch	487
File Upload	487
HTTP File Upload	488
USB File Upload	489
Download File To Switch	490
File Download	490
HTTP File Download	492
USB File Download	494
File Management	495
Copy	495
Dual Image Configuration	496
Troubleshooting	497
Ping IPv4	497
Ping IPv6	498
Traceroute IPv4	499
Traceroute IPv6	500
9. Help	501
Online Help	501
Support	501
User Guide	502
Registration	503
A. Default Settings	505
B. Configuration Examples	509
Virtual Local Area Networks (VLANs)	509
VLAN Example Configuration	510
Access Control Lists (ACLs)	511
MAC ACL Example Configuration	512
Standard IP ACL Example Configuration	513
Differentiated Services (DiffServ)	514
Class	514
DiffServ Traffic Classes	515
Creating Policies	515
DiffServ Example Configuration	517
802.1X	518
802.1X Example Configuration	520
MSTP	521
MSTP Example Configuration	523
C. Notification of Compliance	525

Match case Limit results 1 per page

Field

Description

Accounting Server Address

Identifies the accounting server associated with the statistics.

Round Trip Time(secs)

Displays the time interval, in hundredths of a second, between the

most recent Accounting-Response and the Accounting-Request

that matched it from this RADIUS accounting server.

Accounting Requests

Displays the number of RADIUS Accounting-Request packets sent

not including retransmissions.

Accounting Retransmissions

Displays the number of RADIUS Accounting-Request packets

retransmitted to this RADIUS accounting server.

Accounting Responses

Displays the number of RADIUS packets received on the

accounting port from this server.

Malformed Accounting Responses

Displays the number of malformed RADIUS Accounting-Response

packets received from this server. Malformed packets include

packets with an invalid length. Bad authenticators and unknown

types are not included as malformed accounting responses.

Bad Authenticators

Displays the number of RADIUS Accounting-Response packets

that contained invalid authenticators received from this accounting

server.

Pending Requests

Displays the number of RADIUS Accounting-Request packets sent

to this server that have not yet timed out or received a response.

Timeouts

Displays the number of accounting timeouts to this server.

Unknown Types

Displays the number of RADIUS packets of unknown type that

were received from this server on the accounting port.

Packets Dropped

Displays the number of RADIUS packets that were received from

this server on the accounting port and dropped for some other

reason.

Managing Device Security

364

ProSafe M5300 Switch

Configuring TACACS+

TACACS+ provides a centralized user management system, while still retaining consistency

with RADIUS and other authentication processes. TACACS+ provides the following services:

•

Authentication:

Provides authentication during login and via user names and

user-defined passwords.

•

Authorization:

Performed at login. When the authentication session is completed, an

authorization session starts using the authenticated user name. The TACACS+ server

checks the user privileges.

The TACACS+ protocol ensures network security through encrypted protocol exchanges

between the device and TACACS+ server.