Configuring Authentication At Local Radius Authentication Server; Configuring Authentication At Remote Tacacs Server - 3Com 8800 Configuration Manual

3Com Switch 8800 Configuration Guide

40.6.2 Configuring Authentication at Local RADIUS Authentication Server

Local RADIUS authentication of Telnet/FTP users is similar to the remote RADIUS
authentication described in section 40.6.1 . But you should modify the server IP
address in Figure 40-4 of section 40.6.1
3Com, the UDP port number of the authentication server to 1645.
Note:
For details about local RADIUS authentication of Telnet/FTP users, refer to "40.3.15
Creating/Deleting a Local RADIUS authentication Server".

40.6.3 Configuring Authentication at Remote TACACS Server

I. Network requirements
Configure the switch to use a TACACS server to provide authentication and
authorization services to login users (see the following figure).
Connect the switch to one TACACS server (which acting as a AAA server) with the IP
address 10.110.91.164. On the switch, set the shared key for AAA packet encryption to
"expert". Configure the switch to send usernames to the TACACS server with isp-name
removed.
On the TACACS server, set the shared key for encrypting the packets exchanged with
the switch to "expert" .
II. Network diagram
telnet user
Figure 40-5 Network diagram for TACACS authentication
Chapter 40 AAA and RADIUS/TACACS+ Protocol Con
to 127.0.0.1, authentication password to
Authentication Servers
( IP address:10.110.91.164 )
Switch
40-33
Internet Internet
figuration