Radius And Tacacs; Authentication And Accounting Screens; Radius Server Setup; Figure 98 Advanced Application > Auth And Acct - ZyXEL Communications MGS-3712 User Manual

Chapter 22 Authentication & Accounting

22.1.2 RADIUS and TACACS+

RADIUS and TACACS+ are security protocols used to authenticate users by means of an
external server instead of (or in addition to) an internal device user database that is limited to
the memory capacity of the device. In essence, RADIUS and TACACS+ authentication both
allow you to validate an unlimited number of users from a central location.
The following table describes some key differences between RADIUS and TACACS+.

Table 56 RADIUS vs TACACS+

Transport
Protocol
Encryption

22.2 Authentication and Accounting Screens

To enable authentication, accounting or both on the Switch. First, configure your
authentication server settings (RADIUS, TACACS+ or both) and then set up the
authentication priority and accounting settings.
Click Advanced Application > Auth and Acct in the navigation panel to display the screen
as shown.
Figure 98 Advanced Application > Auth and Acct

22.2.1 RADIUS Server Setup

Use this screen to configure your RADIUS server settings. See
more information on RADIUS servers and
utilized by the authentication and accounting features on the Switch. Click on the RADIUS
Server Setup link in the Authentication and Accounting screen to view the screen as shown.
172
RADIUS
UDP (User Datagram Protocol)
Encrypts the password sent for
authentication.
TACACS+
TCP (Transmission Control Protocol)
All communication between the client (the
Switch) and the TACACS server is
encrypted.
Section 22.1.2 on page 172
Section 22.3 on page 180
MGS-3712/MGS-3012F User's Guide
for
for RADIUS attributes