ZyXEL Communications ONU-2024 Series, User Manual

Page: 146 / 268

Chapter 20 Authentication & Accounting
ONU User’s Guide
146
20.1.2 What You Need to Know About these Screens
The following terms and concepts may help as you read through this chapter.
Local User Accounts
By storing user profiles locally on the ONU, your ONU is able to authenticate and authorize
users without interacting with a network AAA server. However, there is a limit on the number
of users you may authenticate in this way (See
Chapter 27 on page 199 ).
RADIUS and
RADIUS and are security protocols used to authenticate users by means of an
external server instead of (or in addition to) an internal device user database that is limited to
the memory capacity of the device. In essence, RADIUS and authentication both
allow you to validate an unlimited number of users from a central location.
The following table describes some key differences between RADIUS and .
Authentication and Accounting
To enable authentication, accounting or both on the ONU. First, configure your authentication
server settings (RADIUS, or both) and then set up the authentication priority and
accounting settings.
Click Advanced Application > Auth and Acct in the navigation panel to display the screen
as shown.
Figure 75 Advanced Application > Auth and Acct
Table 46 RADIUS vs.
RADIUS
Transport
Protocol UDP (User Datagram Protocol) TCP (Transmission Control Protocol)
Encryption Encrypts the password sent for
authentication. All communication between the client (the
ONU) and the TACACS server is
encrypted.