ZyXEL Communications GS2210-8 User Manual page 218

Table 94 Advanced Applicat ion > AAA > AAA Set up ( cont inued)
LABEL DESCRIPTION
Login These fields specify which dat abase t he Swit ch should use ( first , second and t hird) t o
aut hent icat e adm inist rat or account s ( users for Swit ch m anagem ent ) .
Configure t he local user account s in t he Acce ss Con t r ol > Login s screen. The TACACS+
and RADI US are ext ernal servers. Before you specify t he priorit y, m ake sure you have set
up t he corresponding dat abase correct ly first .
You can specify up t o t hree m et hods for t he Swit ch t o aut hent icat e adm inist rat or account s.
The Swit ch checks t he m et hods in t he order you configure t hem ( first M e t h od 1 , t hen
M e t h od 2 and finally M e t h od 3 ) . You m ust configure t he set t ings in t he M e t h od 1 field.
I f you want t he Swit ch t o check ot her sources for adm inist rat or account s, specify t hem in
M e t h od 2 and M e t h od 3 fields.
Select loca l t o have t he Swit ch check t he adm inist rat or account s configured in t he Acce ss
Con t r ol > Login s screen.
Select r a diu s t o have t he Swit ch check t he adm inist rat or account s configured via your
RADI US server.
Select t a ca cs+ t o have t he Swit ch check t he adm inist rat or account s configured via your
TACACS+ server.
Aut horizat ion Use t his sect ion t o configure aut horizat ion set t ings on t he Swit ch.
Type Set whet her t he Swit ch provides t he following services t o a user.
• Ex e c: Allow an adm inist rat or which logs int o t he Swit ch t hrough Telnet or SSH t o have
a different access privilege level assigned via t he ext ernal server.
• D ot 1 x : Allow an I EEE 802.1x client t o have different bandwidt h lim it or VLAN I D
assigned via t he ext ernal server.
Act ive Select t his t o act ivat e aut horizat ion for a specified event t ypes.
Console Select t his t o allow an adm inist rat or which logs in t he Swit ch t hrough t he console port t o
have different access privilege level assigned via t he ext ernal server.
Met hod Select whet her you want t o use RADI US or TACACS+ for aut horizat ion of specific t ypes of
event s.
RADI US is t he only m et hod for I EEE 802.1x aut horizat ion.
Account ing Use t his sect ion t o configure account ing set t ings on t he Swit ch.
Updat e Period This is t he am ount of t im e in m inut es before t he Swit ch sends an updat e t o t he account ing
server. This is only valid if you select t he st a r t - st op opt ion for t he Ex e c or D ot 1 x ent ries.
Type The Swit ch support s t he following t ypes of event s t o be sent t o t he account ing server( s) :
• Syst e m - Configure t he Swit ch t o send inform at ion when t he follow ing syst em event s
occur: syst em boot s up, syst em shut s down, syst em account ing is enabled, syst em
account ing is disabled
• Ex e c - Configure t he Swit ch t o send inform at ion when an adm inist rat or logs in and logs
out via t he console port , t elnet or SSH.
• D ot 1 x - Configure t he Swit ch t o send inform at ion when an I EEE 802.1x client begins a
session ( aut hent icat es via t he Swit ch) , ends a session as well as int erim updat es of a
session.
• Com m a n ds - Configure t he Swit ch t o send inform at ion when com m ands of specified
privilege level and higher are execut ed on t he Swit ch.
Act ive Select t his t o act ivat e account ing for a specified event t ypes.
Broadcast Select t his t o have t he Swit ch send account ing inform at ion t o all configured account ing
servers at t he sam e t im e.
I f you don't select t his and you have t wo account ing servers set up, t hen t he Swit ch sends
inform at ion t o t he first account ing server and if it doesn't get a response from t he
account ing server t hen it t ries t he second account ing server.
Chapter 25 AAA
GS2210 Series User's Guide
218