ZyXEL MES3500-24F User Guide - Page 202
AAA Screens
View all ZyXEL MES3500-24F manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 202 highlights
Chapter 25 AAA 25.1.2 RADIUS and TACACS+ RADIUS and TACACS+ are security protocols used to authenticate users by means of an external server instead of (or in addition to) an internal device user database that is limited to the memory capacity of the device. In essence, RADIUS and TACACS+ authentication both allow you to validate an unlimited number of users from a central location. The following table describes some key differences between RADIUS and TACACS+. Table 66 RADIUS vs TACACS+ RADIUS Transport Protocol UDP (User Datagram Protocol) Encryption Encrypts the password sent for authentication. TACACS+ TCP (Transmission Control Protocol) All communication between the client (the Switch) and the TACACS server is encrypted. 25.2 AAA Screens The AAA screens allow you to enable authentication, authorization, accounting or all of them on the Switch. First, configure your authentication and accounting server settings (RADIUS, TACACS+ or both) and then set up the authentication priority, activate authorization and configure accounting settings. Click Advanced Application > AAA in the navigation panel to display the screen as shown. Figure 106 Advanced Application > AAA 25.2.1 RADIUS Server Setup Use this screen to configure your RADIUS server settings. See Section 25.1.2 on page 202 for more information on RADIUS servers and Section 25.3 on page 210 for RADIUS attributes utilized by the 202 MES3500-24/24F User's Guide