Planet Networking & Communication WGSW-24010 User Manual page 213

TACACS+ provides the following services:
• Authentication -- Provides authentication during login and via user names and user-defined passwords.
• Authorization -- Performed at login. Once the authentication session is completed, an authorization session
starts using the authenticated user name. The TACACS server checks the user privileges.
The TACACS+ protocol ensures network integrity through encrypted protocol exchanges between the device and
TACACS+ server.
The TACACS+ Settings page is divided into the following sections:
• TACACS+ Server Section
• Default Parameters Section
TACACS+ Server Section
The TACACS+ Server section contains the following fields:
• Host IP Address -- Specifies the TACACS+ server IP address.
• Priority (0-65535) -- Specifies the order in which the TACACS+ servers are used. The default is 0.
• Source IP Address -- The device source IP address used for the TACACS+ session between the device and
the TACACS+ server.
• Key String (0-128 Characters) -- Defines the authentication and encryption key for TACACS+ communications
between the device and the TACACS+ server. This key must match the encryption used on the TACACS+
server.
• Authentication Port (0-65535) -- The port number through which the TACACS+ session occurs. The default is
port 49.
• Reply Timeout (1-30) (Sec) -- The amount of time that passes before the connection between the device and
the TACACS+ server times out. The field range is 1-30 seconds.
• Status -- The connection status between the device and the TACACS+ server. The possible field values are:
• Connected -- There is currently a connection between the device and the TACACS+ server.
• Not Connected -- There is not currently a connection between the device and the TACACS+ server.
• Single Connection -- Maintains a single open connection between the device and the TACACS+ server when
selected
Figure 3-39 TACACS+ Settings screen
205