ZyXEL Communications MES3500-24, Руководство пользователя

Страница: 202 / 349

Chapter 25 AAA
MES3500-24/24F User’s Guide
202
25.1.2 RADIUS and
RADIUS and are security protocols used to authenticate users by means of an external
server instead of (or in addition to) an internal device user database that is limited to the memory
capacity of the device. In essence, RADIUS and authentication both allow you to validate
an unlimited number of users from a central location.
The following table describes some key differences between RADIUS and .
25.2 AAA Screens
The AAA screens allow you to enable authentication, authorization, accounting or all of them on the
Switch. First, configure your authentication and accounting server settings (RADIUS, or
both) and then set up the authentication priority, activate authorization and configure accounting
settings.
Click Advanced Application > AAA in the navigation panel to display the screen as shown.
Figure 106
Advanced Application > AAA
25.2.1 RADIUS Server Setup
Use this screen to configure your RADIUS server settings. See Section 25.1.2 on page 202 for more
information on RADIUS servers and Section 25.3 on page 210 for RADIUS attributes utilized by the
Table 66
RADIUS vs
RADIUS
Transport
Protocol UDP (User Datagram Protocol) TCP (Transmission Control Protocol)
Encryption Encrypts the password sent for
authentication. All communication between the client (the
Switch) and the TACACS server is
encrypted.