Edge-Core ECS4110-28T, Management Manual, Page: 312 / 1514

C
HAPTER
13
| Security Measures
AAA Authentication, Authorization and Accounting
– 312 –
P
ARAMETERS
These parameters are displayed:
◆
Authentication Sequence – Select the authentication, or
authentication sequence required:
■
Local – User authentication is performed only locally by the switch.
■
RADIUS – User authentication is performed using a RADIUS server
only.
■
TACACS – User authentication is performed using a
server only.
■
[authentication sequence] – User authentication is performed by up
to three authentication methods in the indicated sequence.
W
EB
I
NTERFACE
To configure the method(s) of controlling management access:
1.
Click Security, AAA, System Authentication.
2.
Specify the authentication sequence (i.e., one to three methods).
3.
Click Apply.
Figure 150: Configuring the Authentication Sequence
C
ONFIGURING
R
EMOTE
L
OGON
A
UTHENTICATION
S
ERVERS
Use the Security > AAA > Server page to configure the message exchange
parameters for RADIUS or remote access authentication servers.
Remote Authentication Dial-in User Service (RADIUS) and Terminal Access
Controller Access Control System Plus () are logon authentication
protocols that use software running on a central server to control access to
RADIUS-aware or TACACS-aware devices on the network. An
authentication server contains a database of multiple user name/password
pairs with associated privilege levels for each user that requires
management access to the switch.