ZyXEL Communications XMG1915 Series User Manual page 314

The following table describes the labels in this screen.
Table 177 SECURITY > AAA > AAA Setup
LABEL DESCRIPTION
Server Key Encryption
Use this section to configure server key encryption settings.
Active Enable the switch button to enable server key (shared secret) encryption for RADIUS server for
security enhancement.
The shared secret will be stored on the Switch in an encrypted format and displayed as '*' in
the SECURITY > AAA > RADIUS Server Setup screen.
Authentication
Use this section to specify the methods used to authenticate users accessing the Switch.
Login These fields specify which database the Switch should use (first and second) to authenticate
administrator accounts (users for Switch management).
Configure the local user accounts in the SYSTEM > Logins screen. The RADIUS is an external
server. Before you specify the priority, make sure you have set up the corresponding database
correctly first.
You can specify up to two methods for the Switch to authenticate administrator accounts. The
Switch checks the methods in the order you configure them (first Method 1, and then Method
2). You must configure the settings in the Method 1 field. If you want the Switch to check
another source for administrator accounts, specify them in the Method 2 field.
Select local to have the Switch check the administrator accounts configured in the SYSTEM >
Logins screen.
Select radius to have the Switch check the administrator accounts configured through your
RADIUS server.
Authorization
Use this section to configure authorization settings on the Switch.
Type Set whether the Switch provides the following services to a user.
• Exec: Allow an administrator which logs into the Switch through Telnet or SSH to have a
different access privilege level assigned through the external server.
Active Enable the switch button to activate authorization for a specified event type.
Method RADIUS is the only method for authorization of the Exec type of service.
Accounting
Use this section to configure accounting settings on the Switch.
Type The Switch supports the following types of events to be sent to the accounting servers:
• System – Configure the Switch to send information when the following system events occur:
system boots up, system shuts down, system accounting is enabled, system accounting is
disabled.
Active Enable the switch button to activate accounting for a specified event type.
Broadcast Select this to have the Switch send accounting information to all configured accounting
servers at the same time.
If you do not select this and you have two accounting servers set up, then the Switch sends
information to the first accounting server and if it does not get a response from the accounting
server then it tries the second accounting server.
Mode This should show '-' by default.
Method RADIUS is the only method for recording System type of event.
Chapter 54 AAA
XMG1915 Series User's Guide
314