ZyXEL Communications XGS-4728F User Manual page 220

Chapter 25 AAA
The following table describes the labels in this screen.
Table 67 Advanced Application > AAA > TACACS+ Server Setup
LABEL
Authentication
Server
Mode
Timeout
Index
IP Address
TCP Port
Shared Secret
Delete
Apply
Cancel
Accounting
Server
Timeout
Index
IP Address
TCP Port
220
DESCRIPTION
Use this section to configure your TACACS+ authentication settings.
This field is only valid if you configure multiple TACACS+ servers.
Select index-priority and the Switch tries to authenticate with the first
configured TACACS+ server, if the TACACS+ server does not respond
then the Switch tries to authenticate with the second TACACS+ server.
Select round-robin to alternate between the TACACS+ servers that it
sends authentication requests to.
Specify the amount of time in seconds that the Switch waits for an
authentication request response from the TACACS+ server.
If you are using index-priority for your authentication and you are
using two TACACS+ servers then the timeout value is divided between
the two TACACS+ servers. For example, if you set the timeout value to
30 seconds, then the Switch waits for a response from the first TACACS+
server for 15 seconds and then tries the second TACACS+ server.
This is a read-only number representing a TACACS+ server entry.
Enter the IP address of an external TACACS+ server in dotted decimal
notation.
The default port of a TACACS+ server for authentication is 49. You need
not change this value unless your network administrator instructs you to
do so.
Specify a password (up to 32 alphanumeric characters) as the key to be
shared between the external TACACS+ server and the Switch. This key is
not sent over the network. This key must be the same on the external
TACACS+ server and the Switch.
Check this box if you want to remove an existing TACACS+ server entry
from the Switch. This entry is deleted when you click Apply.
Click Apply to save your changes to the Switch's run-time memory. The
Switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the non-
volatile memory when you are done configuring.
Click Cancel to begin configuring this screen afresh.
Use this section to configure your TACACS+ accounting settings.
Specify the amount of time in seconds that the Switch waits for an
accounting request response from the TACACS+ server.
This is a read-only number representing a TACACS+ accounting server
entry.
Enter the IP address of an external TACACS+ accounting server in dotted
decimal notation.
The default port of a TACACS+ accounting server is 49. You need not
change this value unless your network administrator instructs you to do
so.
XGS-4728F User's Guide