LEGRAND Server Technology PRO4X User Manual page 258

Field/setting
Type of TACACS+
authentication
Port
Enable Accounting?
Timeout
Retries
Shared secret,
Confirm shared secret
1) Click Add Server or Test Connection to verify the settings.
2) To add more servers, repeat the same steps.
3) In the TACACS+ page, use the arrow buttons to arrange the servers in the order they should be
accessed, then click Save.
4) To begin using the configuration, make sure TACACS+ is enabled: Go to Device Settings > Security >
Authentication, and select TACACS+ as the Authentication Type.
258
Description
Select an authentication protocol.
• • ASCII
• •
PAP (Password Authentication Protocol)
• • CHAP (Challenge Handshake Authentication Protocol)
• •
MS-CHAP (Microsoft Challenge Handshake Authentication Protocol)
CHAP is generally considered more secure because the user name and password
are encrypted, while in PAP they are transmitted in the clear.
MS‑CHAP provides stronger security than the other options.
Note: All authentication methods are insecure. It is strongly recommended
to use TACACS+ only in a secure networking environment. A warning
displays for all methods.
The default port is 49
To use non-standard port, type a new port number.
Default is enabled.
Accounting allows you to log activity executed on the TACACS+ server.
Default is 10 seconds.
Maximum amount of time to establish contact with the server before timing out.
Enter the timeout period in seconds.
Default is 3.
Enter the number of retries.
The shared secret is necessary to protect communication with the server.