Netgear XCM8806 Chassis User Manual - Page 471

NETGEAR 8800 User Manual Server name : IP address : 10.201.31.235 Server IP Port: 49 Client address: 10.201.31.85 (VR-Default) Shared secret : purple TACACS+ Acct Server Connect Timeout sec: 3 Primary TACACS+ Accounting Server: Server name : IP address : 10.201.31.238 Server IP Port: 49 Client address: 10.201.31.85 (VR-Default) Shared secret : purple Secondary TACACS+ Accounting Server: Server name : IP address : 10.201.31.235 Server IP Port: 49 Client address: 10.201.31.85 (VR-Default) Shared secret : purple Authenticating Management Sessions Through a RADIUS Server You can use a Remote Authentication Dial In User Service (RADIUS) server to authenticate management sessions for multiple switches. A RADIUS server allows you to centralize the authentication database, so that you do not have to maintain a separate local database on each switch. RADIUS servers provide the following services for management sessions: • Username and password authentication • Command authorization (the RADIUS server validates whether the user is authorized to execute each command) • Accounting service (tracks authentication and authorization events) Note: You can use a local database on each switch as a backup authentication service if the RADIUS service is unavailable. When the RADIUS service is operating, privileges defined on the RADIUS server take precedence over privileges configured in the local database. To use RADIUS server features, you need the following components: • RADIUS client software, which is included in the XCM8800 software. • A RADIUS server, which is a third-party product. Chapter 17. Security | 471