Aaa Screens; Radius Server Setup - ZyXEL Communications GS2220 Series User Manual

track when users log in, log out, execute commands and so on. Accounting can also record system
related actions such as boot up and shut down times of the Switch.
L o c a l Use r Ac c o unts
By storing user profiles locally on the Switch, your Switch is able to authenticate and authorize users
without interacting with a network AAA server. However, there is a limit on the number of users you may
authenticate in this way.
RADIUS a nd T AC AC S+
RADIUS and TACACS+ are security protocols used to authenticate users by means of an external server
instead of (or in addition to) an internal device user database that is limited to the memory capacity of
the device. In essence, RADIUS and TACACS+ authentication both allow you to validate an unlimited
number of users from a central location.
The following table describes some key differences between RADIUS and TACACS+.
Table 109 RADIUS vs. TACACS+
Transport
Protocol
Encryption
25.2 AAA Sc re e ns
The screens allow you to enable authentication and authorization or both of them on the Switch.
AAA
First, configure your authentication server settings (RADIUS, TACACS+ or both) and then set up the
authentication priority, activate authorization.
Click
Adva nc e d Applic a tio n
Fig ure 191
25.3 RADIUS Se rve r Se tup
Use this screen to configure your RADIUS server settings. Click the
screen to view the screen as shown.
RADIUS
UDP (User Datagram Protocol)
Encrypts the password sent for
authentication.
>
AAA
Advanced Application > AAA
GS2220 Series User's Guide
Chapter 25 AAA
T AC AC S+
TCP (Transmission Control Protocol)
All communication between the client (the Switch)
and the TACACS server is encrypted.
in the navigation panel to display the screen as shown.
247
link in the
RADIUS Se rve r Se tup AAA