ZyXEL Communications ONU-2024 Series, User Manual

Page: 145 / 268

ONU User’s Guide
145
C
H A P T E R
2 0
Authentication & Accounting
20.1 Overview
This chapter describes how to configure authentication and accounting settings on the ONU.
Authentication is the process of determining who a user is and validating access to the ONU.
The ONU can authenticate users who try to log in based on user accounts configured on the
ONU itself. The ONU can also use an external authentication server to authenticate a large
number of users
Authorization is the process of determining what a user is allowed to do. Different user
accounts may have higher or lower privilege levels associated with them. For example, user A
may have the right to create new login accounts on the ONU but user B cannot. The ONU can
authorize users based on user accounts configured on the ONU itself or it can use an external
server to authorize a large number of users.
Accounting is the process of recording what a user is doing. The ONU can use an external
server to track when users log in, log out, execute commands and so on. Accounting can also
record system related actions such as boot up and shut down times of the ONU.
The external servers that perform authentication, authorization and accounting functions are
known as AAA servers. The ONU supports RADIUS (Remote Authentication Dial-In User
Service, see
Section on page 146 ) and (Terminal Access Controller Access-
Control System Plus, see Section on page 146 ) as external authentication, authorization and
accounting servers.
Figure 74 AAA Server
20.1.1 What You Can Do in these Screens
• The Radius Server Setup screen lets you configure your RADIUS server settings
( Section 20.1.3 on page 147 ).
• The Server Setup screen lets you configure your server settings
( Section 20.1.4 on page 149 ).
• The Authentication and Accounting Setup screen lets you configure authentication and
accounting settings on the ONU ( Section 20.1.5 on page 151 ).
Client AAA Server