Local User Accounts; Radius And Tacacs; Aaa Screens - ZyXEL Communications GS2210-8 User Manual

based on user account s configured on t he Swit ch it self or it can use an ext ernal server t o aut horize
a large num ber of users.
Account ing is t he process of recording what a user is doing. The Swit ch can use an ext ernal server
t o t rack when users log in, log out , execut e com m ands and so on. Account ing can also record
syst em relat ed act ions such as boot up and shut down t im es of t he Swit ch.

Local User Accounts

By st oring user profiles locally on t he Swit ch, your Swit ch is able t o aut hent icat e and aut horize
users wit hout int eract ing wit h a net work AAA server. However, t here is a lim it on t he num ber of
users you m ay aut hent icat e in t his way ( See

RADIUS and TACACS+

RADI US and TACACS+ are securit y prot ocols used t o aut hent icat e users by m eans of an ext ernal
server inst ead of ( or in addit ion t o) an int ernal device user dat abase t hat is lim it ed t o t he m em ory
capacit y of t he device. I n essence, RADI US and TACACS+ aut hent icat ion bot h allow you t o validat e
an unlim it ed num ber of users from a cent ral locat ion.
The following t able describes som e key differences bet ween RADI US and TACACS+ .
Table 91 RADI US vs. TACACS+
Transport
Prot ocol
Encrypt ion

25.2 AAA Screens

The AAA screens allow you t o enable aut hent icat ion and aut horizat ion or bot h of t hem on t he
Swit ch. First , configure your aut hent icat ion server set t ings ( RADI US, TACACS+ or bot h) and t hen
set up t he aut hent icat ion priorit y, act ivat e aut horizat ion.
Click Adva nce d Applica t ion > AAA in t he navigat ion panel t o display t he screen as shown.
Figure 151 Advanced Applicat ion > AAA
Chapter 25 AAA
RADIUS
UDP ( User Dat agram Prot ocol)
Encrypt s t he password sent for
aut hent icat ion.
GS2210 Series User's Guide
Sect ion 43.4 on page
TACACS+
TCP ( Transm ission Cont rol Prot ocol)
All com m unicat ion bet ween t he client ( t he Swit ch)
and t he TACACS server is encrypt ed.
212
368) .