Radius And Tacacs; Aaa Screens; Radius Server Setup - ZyXEL Communications ES3500-24 User Manual

25.1.2 RADIUS and TACACS+

RADIUS and TACACS+ are security protocols used to authenticate users by means of an external
server instead of (or in addition to) an internal device user database that is limited to the memory
capacity of the device. In essence, RADIUS and TACACS+ authentication both allow you to validate
an unlimited number of users from a central location.
The following table describes some key differences between RADIUS and TACACS+.
Table 72 RADIUS vs TACACS+
Transport
Protocol
Encryption

25.2 AAA Screens

The AAA screens allow you to enable authentication, authorization, accounting or all of them on the
Switch. First, configure your authentication and accounting server settings (RADIUS, TACACS+ or
both) and then set up the authentication priority, activate authorization and configure accounting
settings.
Click Advanced Application > AAA in the navigation panel to display the screen as shown.
Figure 111 Advanced Application > AAA

25.2.1 RADIUS Server Setup

Use this screen to configure your RADIUS server settings. See
information on RADIUS servers and
ES3500 Series User's Guide
RADIUS
UDP (User Datagram Protocol)
Encrypts the password sent for
authentication.
Section 25.3 on page 211
TACACS+
TCP (Transmission Control Protocol)
All communication between the client (the
Switch) and the TACACS server is
encrypted.
Section 25.1.2 on page 203
for RADIUS attributes utilized by the
Chapter 25 AAA
for more
203