Edge-Core ECS3510-10PD Management Manual page 315

Figure 152: Authentication Server Operation
Web
Telnet
RADIUS/
TACACS+
server
RADIUS uses UDP while TACACS+ uses TCP. UDP only offers best effort
delivery, while TCP offers a more reliable connection-oriented transport.
Also, note that RADIUS encrypts only the password in the access-request
packet from the client to the server, while TACACS+ encrypts the entire
body of the packet.
CLI R
EFERENCES
"RADIUS Client" on page 822
◆
"TACACS+ Client" on page 826
◆
"AAA" on page 830
◆
C U
OMMAND SAGE
If a remote authentication server is used, you must specify the
◆
message exchange parameters for the remote authentication protocol.
Both local and remote logon authentication control management access
via the console port, web browser, or Telnet.
RADIUS and TACACS+ logon authentication assign a specific privilege
◆
level for each user name/password pair. The user name, password, and
privilege level must be configured on the authentication server. The
encryption methods used for the authentication process must also be
configured or negotiated between the authentication server and logon
client. This switch can pass authentication messages between the
server and client that have been encrypted using MD5 (Message-Digest
5), TLS (Transport Layer Security), or TTLS (Tunneled Transport Layer
Security).
P
ARAMETERS
These parameters are displayed:
Configure Server
RADIUS
◆
Global – Provides globally applicable RADIUS settings.
■
Server Index – Specifies one of five RADIUS servers that may be
■
configured. The switch attempts authentication using the listed
sequence of servers. The process ends when a server either
approves or denies access to a user.
– 315 –
C 13
HAPTER
AAA Authentication, Authorization and Accounting
console
1. Client attempts management access.
2. Switch contacts authentication server.
3. Authentication server challenges client.
4. Client responds with proper password or key.
5. Authentication server approves access.
6. Switch grants management access.
| Security Measures