Using The Cli; Adding Servers - TP-Link Jetstream T1500G-8T User Manual

Configuring AAA
■ On the Switch
The local username and password for login can be configured in the User Management
feature. For details, refer to
To configure the local Enable password for getting administrative privileges, choose the
menu SECURITY > AAA > Global Config to load the following page.
Figure 2-8 Configure Enable Password
There are two options: Clear Password and Set Password. You can choose whether the
local Enable password is required when the guests try to get administrative privileges.
Click Apply.
Tips:
administrative privileges.
■ On the Server
The accounts created by the RADIUS/TACACS+ server can only view the configurations
and some network information without the Enable password.
Some configuration principles on the server are as follows:
■ For Login authentication configuration, more than one login account can be created on
the server. Besides, both the user name and password can be customized.
■ For Enable password configuration:
On RADIUS server, the user name should be set as $enable$, and the Enable password
is customizable. All the users trying to get administrative privileges share this Enable
password.
On TACACS+ server, configure the value of "enable 15" as the Enable password in the
configuration file. All the users trying to get administrative privileges share this Enable
password.
2.2

Using the CLI

2.2.1 Adding Servers

You can add one or more RADIUS/TACACS+ servers on the switch for authentication. If
multiple servers are added, the server with the highest priority authenticates the users
Downloaded from ManualsNet.com
Managing
The logged-in guests can enter the local Enable password on this page to get
search engine
System.
AAA Configuration
User Guide 535