Authentication & Accounting; Authentication, Authorization And Accounting; Local User Accounts; Figure 92 Aaa Server - ZyXEL Communications GS-3012F/3012 User Manual

C
H A P T E R
Authentication & Accounting
This chapter describes how to configure authentication and accounting settings on the Switch.

22.1 Authentication, Authorization and Accounting

Authentication is the process of determining who a user is and validating access to the Switch.
The Switch can authenticate users who try to log in based on user accounts configured on the
Switch itself. The Switch can also use an external authentication server to authenticate a large
number of users
Authorization is the process of determining what a user is allowed to do. Different user
accounts may have higher or lower privilege levels associated with them. For example, user A
may have the right to create new login accounts on the Switch but user B cannot. The Switch
can authorize users based on user accounts configured on the Switch itself or it can use an
external server to authorize a large number of users.
Accounting is the process of recording what a user is doing. The Switch can use an external
server to track when users log in, log out, execute commands and so on. Accounting can also
record system related actions such as boot up and shut down times of the Switch.
The external servers that perform authentication, authorization and accounting functions are
known as AAA servers. The Switch supports RADIUS (Remote Authentication Dial-In User
Service, see Section 22.1.2 on page
Control System Plus, see
and accounting servers.

Figure 92 AAA Server

Client

22.1.1 Local User Accounts

By storing user profiles locally on the Switch, your Switch is able to authenticate and
authorize users without interacting with a network AAA server. However, there is a limit on
the number of users you may authenticate in this way (See
GS-3012/GS-3012F User's Guide
170) and TACACS+ (Terminal Access Controller Access-
Section 22.1.2 on page 170) as external authentication, authorization
22
AAA Server
Chapter 28 on page 227).
169