3Com Switch 8800 Configuration Guide
Chapter 40 AAA and RADIUS/ Protocol Con
figuration
40-33
40.6.2 Configuring Authentication at Local RADIUS Authentication Server
Local RADIUS authentication of Telnet/FTP users is similar to the remote RADIUS
authentication described in section 40.6.1 . But you should modify the server IP
address in Figure 40-4 of section 40.6.1 to 127.0.0.1, authentication password to
3Com, the UDP port number of the authentication server to 1645.
Note:
For details about local RADIUS authentication of Telnet/FTP users, refer to “40.3.15
Creating/Deleting a Local RADIUS authentication Server”.
40.6.3 Configuring Authentication at Remote TACACS Server
I. Network requirements
Configure the switch to use a TACACS server to provide authentication and
authorization services to login users (see the following figure).
Connect the switch to one TACACS server (which acting as a AAA server) with the IP
address 10.110.91.164. On the switch, set the shared key for AAA packet encryption to
“expert”. Configure the switch to send usernames to the TACACS server with
isp
-
name
removed.
On the TACACS server, set the shared key for encrypting the packets exchanged with
the switch to “expert” .
II. Network diagram
Authentication Servers
( IP address:10.110.91.164 )
Internet
Switch
telnet user
Internet
Figure 40-5
Network diagram for TACACS authentication
