Global Config; Privilege Elevation - TP-Link T1700X-16TS User Manual

the next authentication method in the method list. This process continues until there is a
successful communication with a listed authentication method or until all defined methods are
exhausted. If authentication fails at any point in this circle, which means the secure server or the
local switch denies the user's access, the authentication process stops and no other
authentication methods are attempted.
802.1X Authentication

802.1X protocol uses the RADIUS to provide detailed accounting information and flexible
administrative control over authentication process. The Dot1x List feature defines the RADIUS
server groups in the 802.1X authentication.
RADIUS/TACACS+ Server

Users can configure the RADIUS/TACACS+ servers for the connection between the switch and
the server.
Server Group

Users can define the authentication server group with up to several servers running the same
secure protocols, either RADIUS or TACACS+. Users can set these servers in a preferable order,
which is called the server group list. When a user tries to access the switch, the switch will ask the
first server in the server group list for authentication. If no response is received, the second server
will be queried, and so on.
The switch has two built-in authentication server group, one for RADIUS and the other for
TACACS+. These two server groups cannot be deleted, and the user-defined RADIUS/TACACS+
server will join these two server groups automatically.

12.6.1 Global Config

This page is used to enable/disable the AAA function globally.
Choose the menu Network Security→ AAA→ Global Conifg to load the following page.
Configuration Procedure

Click Enable to enable the AAA function globally.

12.6.2 Privilege Elevation

This page is used to elevate the current logged-in user from guest to admin and gain administrator
level privileges. The authentication password is possibly authenticated in RADIUS/TACACS+
servers, user-defined server groups or local on the switch.
Choose the menu Network Security→ AAA→ Global Conifg to load the following page.
Figure 12-24 AAA Global Config
Figure 12-25 Privilege Elevate
216