Aaa; C Ha Pte R 25 Aaa; Aaa Overview; What You Can Do - ZyXEL Communications GS1920v2 Series User Manual

25.1 AAA O ve rvie w
This chapter describes how to configure authentication, authorization and accounting settings on the
Switch.
The external servers that perform authentication, authorization and accounting functions are known as
AAA servers. The Switch supports RADIUS (Remote Authentication Dial-In User Service, see
TACACS+ on page
RADIUS and TACACS+ on page
Fig ure 163
25.1.1 Wha t Yo u C a n Do
• Use the

AAA

enable authentication and authorization or both of them on the Switch.
• use the
RADIUS Se rve r Se tup
settings.
• Use the
T AC AC S+ Se rve r Se tup
authentication settings.
• Use the
AAA Se tup
accounting settings, such as the methods used to authenticate users accessing the Switch and which
database the Switch should use first.
25.1.2 Wha t Yo u Ne e d to Kno w
Authentication is the process of determining who a user is and validating access to the Switch. The
Switch can authenticate users who try to log in based on user accounts configured on the Switch itself.
The Switch can also use an external authentication server to authenticate a large number of users.
Authorization is the process of determining what a user is allowed to do. Different user accounts may
have higher or lower privilege levels associated with them. For example, user A may have the right to
create new login accounts on the Switch but user B cannot. The Switch can authorize users based on
user accounts configured on the Switch itself or it can use an external server to authorize a large number
of users.
226) and TACACS+ (Terminal Access Controller Access-Control System Plus, see
226) as external authentication and authorization servers.
AAA Server
screen (Section 25.2 on page
screen
screen
screen (Section 25.5 on page
GS1920v2 Series User's Guide
C
HA PTER
226) to display the links to the screens where you can
(Section 25.3 on page 226) to configure your RADIUS server
(Section 25.4 on page
230) to configure authentication, authorization and
225
AAA
228) to configure your TACACS+
2 5
RADIUS and