Security
Configuring
Cisco 350XG & 550XG Series 10G Stackable Managed Switches
390
19
•
Authorization
—Performed at login. After the authentication session is
completed, an authorization session starts using the authenticated
username. The server then checks user privileges.
•
Accounting—Enable accounting of login sessions using the
server. This enables a system administrator to generate accounting reports
from the server.
In addition to providing authentication and authorization services, the
protocol helps to ensure TACACS message protection through encrypted
TACACS body messages.
is supported only with IPv4.
Some servers support a single connection that enables the device to
receive all information in a single connection. If the server does not
support this, the device reverts to multiple connections.
Accounting Using a Server
The user can enable accounting of login sessions using either a RADIUS or
server.
The user-configurable, TCP port used for server accounting is the same
TCP port that is used for server authentication and authorization.
