Ruijie RG-S2900G-E Series, Configuration Manual

Page: 492 / 943

Configuration Guide Configuration
Configuration
Overview
is a security protocol with more powerful function on the basis of TACACS
(RFC 1492 Terminal Access Controller Access Control System). It implements AAA
function of multi-users by Client-Server mode and TACACS server communication. It
needs to configure the related contents of server before using
server.
supports user authentication, authorization and accounting analysis. That
is, we can use one server to authenticate, another one to authorize and the third one
to account at the same time. Each server has its own user data information, being
antagonistic to authenticate, authorize and account.
The table below shows packet format:
Figure 1
 Major Version ― Major Version number;
 Minor Version ― Minor Version number;
 Packet Type ― the value may include:
TAC_PLUS_AUTHEN: = 0x01 (Authentication);
TAC_PLUS_AUTHOR:= 0x02 (Authorization);
TAC_PLUS_ACCT:= 0x03 (Accounting).
 Sequence Number ― packet sequence number in current session. The first
packet sequence number in the session must be 1 and every packet
sequence number followed is added by 1 gradually. Therefore, the client only sends
the packet with odd sequence number, while Daemon only sends the
packet with even sequence number.
 Flags ― this field includes flag with various bitmap format. The Flag value indicates
whether the packet is encrypted or not.
 Session ID ― ID in the session.