ZyXEL Communications GS1920 series User Manual page 195

Figure 145 Advanced Application > AAA > AAA Setup
The following table describes the labels in this screen.
Table 86 Advanced Application > AAA > AAA Setup
LABEL DESCRIPTION
Authentication Use this section to specify the methods used to authenticate users accessing the Switch.
Login These fields specify which database the Switch should use (first, second and third) to
authenticate administrator accounts (users for Switch management).
Configure the local user accounts in the Access Control > Logins screen. The TACACS+
and RADIUS are external servers. Before you specify the priority, make sure you have set
up the corresponding database correctly first.
You can specify up to three methods for the Switch to authenticate administrator accounts.
The Switch checks the methods in the order you configure them (first Method 1, then
Method 2 and finally Method 3). You must configure the settings in the Method 1 field.
If you want the Switch to check other sources for administrator accounts, specify them in
Method 2 and Method 3 fields.
Select local to have the Switch check the administrator accounts configured in the Access
Control > Logins screen.
Select radius to have the Switch check the administrator accounts configured via your
RADIUS server.
Select tacacs+ to have the Switch check the administrator accounts configured via your
TACACS+ server.
Authorization Use this section to configure authorization settings on the Switch.
Type Set whether the Switch provides the following services to a user.
• Exec: Allow an administrator who logs into the Switch to have a different access
privilege level assigned via the external server.
• Dot1x: Allow an IEEE 802.1x client to have different bandwidth limit or VLAN ID
assigned via the external server.
Active Select this to activate authorization for a specified event types.
Chapter 24 AAA
GS1920 Series User's Guide
195