Security > Tacacs - Linksys SRW208 User Manual

Chapter 5
Remote Authorization Dial-In User Service (RADIUS)
servers provide additional security for networks. RADIUS
servers provide a centralized authentication method for
web access.
The Authentication Server IP address.
IP Address
The server priority. The possible values are 0-
Priority
65535, where 1 is the highest value. The RADIUS Server
priority is used to configure the server query order.
Identifies the authentication port.
Authentication Port
The authentication port is used to verify the RADIUS server
authentication. The authenticated port default is 1812.
Defines the number of transmitted
Number of Retries
requests sent to RADIUS server before a failure occurs. The
possible field values are 1 - 10. Three is the default value.
Defines the amount of the time in
Timeout for Reply
seconds the device waits for an answer from the RADIUS
server before retrying the query, or switching to the next
server. The possible field values are 1 - 30. Three is the
default value.
Defines the amount of time (minutes) that a
Dead Time
RADIUS server is bypassed for service requests. The range
is 0-2000. The Dead Time default is 0 minutes.
Defines the default key string used for
Key String
authenticating and encrypting all RADIUS communications
between the device and the RADIUS server. This key must
match the RADIUS encryption.
Defines the source IP address that is
Source IP Address
used for communication with RADIUS servers.
Specifies the RADIUS server authentication
Usage Type
type. The default value is Login. The possible field values
are:
Indicates that the RADIUS server is used for
Login
authenticating user name and passwords.
Indicates that the RADIUS server is used for
802.1X
802.1X authentication.
Indicates that the RADIUS server is used for
All
authenticating user name and passwords, and 802.1X
port authentication.
The Add to List button adds the RADIUS configuration to
the RADIUS Table at the bottom of the screen.
Security > TACACS+
The device provides Terminal Access Controller Access
Control System (TACACS+) client support. TACACS+
provides centralized security for validation of users
accessing the device. TACACS+ provides a centralized user
management system, while still retaining consistency with
RADIUS and other authentication processes. The TACACS+
protocol ensures network integrity through encrypted
8-Port 10/100 Ethernet Switch with Webview
Advanced Configuration
protocol exchanges between the device and TACACS+
server.
Security > TACACS+
Displays the TACACS+ Server IP
Host IP Address
address.
Displays the order in which the TACACS+ servers
Priority
are used. The default is 0.
Displays the device source IP address
Source IP Address
used for the TACACS+ session between the device and the
TACACS+ server.
Defines the authentication and encryption key
Key String
for TACACS+ server. The key must match the encryption
key used on the TACACS+ server.
Displays the port number through
Authentication Port
which the TACACS+ session occurs. The default is port 49.
Displays the amount of time that
Timeout for Reply
passes before the connection between the device and
the TACACS+ server times out. The field range is 1-30
seconds.
Displays the connection status between the
Status
device and the TACACS+ server. The possible field values
are:
There is currently a connection between
Connected
the device and the TACACS+ server.
There is not currently a connection
Not Connected
between the device and the TACACS+ server.
Maintains a single open connection
Single Connection
between the device and the TACACS+ server when
selected
The Add to List button adds the TACACS+ configuration
to the TACACS+ table at the bottom of the screen.
34