TP-Link T2600G-18TSTL-SG3216 T2600G-18TSUN V1 Configuration Guide - Page 753

Configuring Network Security Network Security BRAS uses the tag as a NAS-Port-ID attribute in the RADIUS packet and send it to the RADIUS server for PPP (Point-to-Point Protocol) authentication. If the tag information is different from the configured one, the authentication will fail. In this way, the illegal users cannot embezzle the accounts of legal users to access the Internet. Additionally, after receiving the PPPoE Active Discovery Offer packet or Sessionconfirmation packet from the BRAS, the switch will remove the tag in the packet and send it to the client. Figure 1-4 Network Topology of PPPoE ID-Insertion Client Switch BRAS PPPoE Server RADIUS Server AAA AAA stands for authentication, authorization and accounting. On TP-Link switches, this feature is mainly used to authenticate the users trying to log in to the switch or get administrative privileges. The administrator can create guest accounts and an Enable password for other users. The guests do not have administrative privileges without the Enable password provided. AAA provides a safe and efficient authentication method. The authentication can be processed locally on the switch or centrally on the RADIUS/TACACS+ server(s). As the following figure shows, the network administrator can centrally configure the management accounts of the switches on the RADIUS server and use this server to authenticate the users trying to access the switch or get administrative privileges. Figure 1-5 Network Topology of AAA Users Switches RADIUS Server Configuration Guide 723