Edge-Core ECS4810-12M Layer 2 Management Manual page 317

Hide thumbs Also See for ECS4810-12M Layer 2:

Table of Contents

Figure 156: Authentication Server Operation

RADIUS uses UDP while TACACS+ uses TCP. UDP only offers best effort

delivery, while TCP offers a more reliable connection-oriented transport.

Also, note that RADIUS encrypts only the password in the access-request

packet from the client to the server, while TACACS+ encrypts the entire

body of the packet.

"RADIUS Client" on page 806

"TACACS+ Client" on page 810

"AAA" on page 814

If a remote authentication server is used, you must specify the

message exchange parameters for the remote authentication protocol.

Both local and remote logon authentication control management access

via the console port, web browser, or Telnet.

RADIUS and TACACS+ logon authentication assign a specific privilege

level for each user name/password pair. The user name, password, and

privilege level must be configured on the authentication server. The

encryption methods used for the authentication process must also be

configured or negotiated between the authentication server and logon

client. This switch can pass authentication messages between the

server and client that have been encrypted using MD5 (Message-Digest

5), TLS (Transport Layer Security), or TTLS (Tunneled Transport Layer

These parameters are displayed:

Configure Server

Global – Provides globally applicable RADIUS settings.

Server Index – Specifies one of five RADIUS servers that may be

configured. The switch attempts authentication using the listed

AAA Authentication, Authorization and Accounting

1. Client attempts management access.

2. Switch contacts authentication server.

3. Authentication server challenges client.

4. Client responds with proper password or key.

5. Authentication server approves access.

6. Switch grants management access.

| Security Measures

Chapters

Table of Contents