ZyXEL Communications GS1350 Series User Manual page 181

Table 79 Advanced Application > AAA > AAA Setup (continued)
L ABEL DESC RIPT IO N
Login These fields specify which database the Switch should use (first and second) to authenticate
administrator accounts (users for Switch management).
Configure the local user accounts in the
external server. Before you specify the priority, make sure you have set up the corresponding
database correctly first.
You can specify up to two methods for the Switch to authenticate administrator accounts. The
Switch checks the methods in the order you configure them (first
). You must configure the settings in the
2
another source for administrator accounts, specify them in the
Select
C o ntro l
Select
server.
Authorization Use this section to configure authorization settings on the Switch.
Type Set whether the Switch provides the following services to a user.
•
Exe c
different access privilege level assigned via the external server.
Active Select this to activate authorization for a specified event types.
Console Select this to allow an administrator which logs in the Switch through the console port to have
different access privilege level assigned via the external server.
Method RADIUS is the only method for authorization of the
Accounting Use this section to configure accounting settings on the Switch.
Update Period This is the amount of time in minutes before the Switch sends an update to the accounting
server. This is only valid if you select the
Type The Switch supports the following types of events to be sent to the accounting servers:
•
Syste m
system boots up, system shuts down, system accounting is enabled, system accounting is
disabled.
•
Exe c
via the console port, telnet or SSH.
Active Select this to activate accounting for a specified event types.
Broadcast Select this to have the Switch send accounting information to all configured accounting
servers at the same time.
If you do not select this and you have two accounting servers set up, then the Switch sends
information to the first accounting server and if it does not get a response from the accounting
server then it tries the second accounting server.
Mode The Switch supports two modes of recording login events. Select:
•
sta rt- sto p
a session, during a user's session (if it lasts past the
session.
•
sto p- o nly
ends a session.
Method RADIUS is the only method for recording
Privilege This field is not configurable for
Chapter 22 AAA
to have the Switch check the administrator accounts configured in the
lo c a l
> screen.
L o g ins
to have the Switch check the administrator accounts configured via your RADIUS
ra dius
: Allow an administrator which logs into the Switch through Telnet or SSH to have a
– Configure the Switch to send information when the following system events occur:
– Configure the Switch to send information when an administrator logs in and logs out
– to have the Switch send information to the accounting server when a user begins
– to have the Switch send information to the accounting server only when a user
Syste m
GS1350 Series User's Guide
181
> screen. The RADIUS is an
Ac c e ss C o ntro l L o g ins
Me tho d 1
field. If you want the Switch to check
Me tho d 1
Me tho d 2
type of service.
Exe c
option for the
sta rt- sto p Exe c
), and when a user ends a
Upda te Pe rio d
or type of event.
Syste m Exe c
and types of events.
Exe c
, and then
Me tho d
field.
Ac c e ss
entries.