Aaa Screens; Radius Server Setup - ZyXEL Communications GS2210 Series User Manual

Local User Accounts
By storing user profiles locally on the Switch, your Switch is able to authenticate and authorize
users without interacting with a network AAA server. However, there is a limit on the number of
users you may authenticate in this way (See
RADIUS and TACACS+
RADIUS and TACACS+ are security protocols used to authenticate users by means of an external
server instead of (or in addition to) an internal device user database that is limited to the memory
capacity of the device. In essence, RADIUS and TACACS+ authentication both allow you to validate
an unlimited number of users from a central location.
The following table describes some key differences between RADIUS and TACACS+.
Table 73 RADIUS vs. TACACS+
Transport
Protocol
Encryption

24.2 AAA Screens

The AAA screens allow you to enable authentication and authorization or both of them on the
Switch. First, configure your authentication server settings (RADIUS, TACACS+ or both) and then
set up the authentication priority, activate authorization.
Click Advanced Application > AAA in the navigation panel to display the screen as shown.
Figure 129 Advanced Application > AAA

24.3 RADIUS Server Setup

Use this screen to configure your RADIUS server settings. See
information on RADIUS servers and
the authentication features on the Switch. Click on the RADIUS Server Setup link in the AAA
screen to view the screen as shown.
GS2210 Series User's Guide
RADIUS
UDP (User Datagram Protocol)
Encrypts the password sent for
authentication.
Section 24.6.2 on page 187
Chapter 36 on page 287).
TACACS+
TCP (Transmission Control Protocol)
All communication between the client (the Switch)
and the TACACS server is encrypted.
Section on page 179
for RADIUS attributes utilized by
Chapter 24 AAA
for more
179