ZyXEL Communications GS3700 Series User Manual page 204

Figure 132 Advanced Application > AAA > TACACS+ Server Setup
The following table describes the labels in this screen.
Table 98 Advanced Application > AAA > TACACS+ Server Setup
LABEL DESCRIPTION
Authentication Use this section to configure your TACACS+ authentication settings.
Server
Mode This field is only valid if you configure multiple TACACS+ servers.
Select index-priority and the Switch tries to authenticate with the first configured
TACACS+ server, if the TACACS+ server does not respond then the Switch tries to
authenticate with the second TACACS+ server.
Select round-robin to alternate between the TACACS+ servers that it sends
authentication requests to.
Timeout Specify the amount of time in seconds that the Switch waits for an authentication request
response from the TACACS+ server.
If you are using index-priority for your authentication and you are using two TACACS+
servers then the timeout value is divided between the two TACACS+ servers. For example,
if you set the timeout value to 30 seconds, then the Switch waits for a response from the
first TACACS+ server for 15 seconds and then tries the second TACACS+ server.
Index This is a read-only number representing a TACACS+ server entry.
IP Address Enter the IP address of an external TACACS+ server in dotted decimal notation.
TCP Port The default port of a TACACS+ server for authentication is 49. You need not change this
value unless your network administrator instructs you to do so.
Shared Secret Specify a password (up to 32 alphanumeric characters) as the key to be shared between
the external TACACS+ server and the Switch. This key is not sent over the network. This
key must be the same on the external TACACS+ server and the Switch.
Chapter 23 AAA
GS3700/XGS3700 Series User's Guide
204