ZyXEL Communications GS1920-48HPv2, Руководство пользователя

Страница: 231 / 432

Chapter 25 AAA
GS1920v2 Series User’s Guide
231
The following table describes the labels in this screen.
Table 96 Advanced Application > AAA > AAA Setup
LABEL DESC RIPTIO N
Authentication Use this section to specify the methods used to authenticate users accessing the Switch.
Login These fields specify which database the Switch should use (first, second and third) to
authenticate administrator accounts (users for Switch management).
Configure the local user accounts in the
Ac c e ss C o ntro l > Lo g ins
screen. The and
RADIUS are external servers. Before you specify the priority, make sure you have set up the
corresponding database correctly first.
You can specify up to three methods for the Switch to authenticate administrator accounts.
The Switch checks the methods in the order you configure them (first
Me tho d 1
, then
Me tho d 2
and finally
Me tho d 3
). You must configure the settings in the
Me tho d 1
field. If you want the
Switch to check other sources for administrator accounts, specify them in
Me tho d 2
and
Me tho d 3
fields.
Select
lo c a l
to have the Switch check the administrator accounts configured in the
Ac c e ss
C o ntro l > Lo g ins
screen.
Select
ra dius
to have the Switch check the administrator accounts configured via your RADIUS
server.
Select
ta c a c s+
to have the Switch check the administrator accounts configured via your
server.
Authorization Use this section to configure authorization settings on the Switch.
Type Set whether the Switch provides the following services to a user.
•
Exe c
: Allow an administrator which logs into the Switch through Telnet or SSH to have a
different access privilege level assigned via the external server.
•
Do t1x
: Allow an IEEE 802.1x client to have different bandwidth limit or VLAN ID assigned via
the external server.
Active Select this to activate authorization for a specified event types.
Method Select whether you want to use RADIUS or for authorization of specific types of
events.
RADIUS is the only method for IEEE 802.1x authorization.
Accounting Use this section to configure accounting settings on the Switch.
Update Period This is the amount of time in minutes before the Switch sends an update to the accounting
server. This is only valid if you select the
sta rt- sto p
option for the
Exe c
or
Do t1x
entries.
Type The Switch supports the following types of events to be sent to the accounting server(s):
•
Syste m
- Configure the Switch to send information when the following system events occur:
system boots up, system shuts down, system accounting is enabled, system accounting is
disabled
•
Exe c
- Configure the Switch to send information when an administrator logs in and logs out
via telnet or SSH.
•
Do t1x
- Configure the Switch to send information when an IEEE 802.1x client begins a session
(authenticates via the Switch), ends a session as well as interim updates of a session.
•
C o m m a nds
- Configure the Switch to send information when commands of specified
privilege level and higher are executed on the Switch.
Active Select this to activate accounting for a specified event types.
Broadcast Select this to have the Switch send accounting information to all configured accounting
servers at the same time.
If you don’t select this and you have two accounting servers set up, then the Switch sends
information to the first accounting server and if it doesn’t get a response from the accounting
server then it tries the second accounting server.