TP-Link T2600G Series User Manual

User Guide 740
Configuring AAA Configuration Examples
3
Configuration Examples
3.1 Network Requirements
As shown below, the switch needs to be managed remotely via Telnet. In addition, the
senior administrator of the company wants to create an account for the less senior
administrators, who can only view the configurations and some network information
without the Enable password provided.
Two RADIUS servers are deployed in the network to provide a safer authenticate method
for the administrators trying to log in or get administrative privileges. If RADIUS Server 1
breaks down and doesn’t respond to the authentication request, RADIUS Server 2 will work,
so as to ensure the stability of the authentication system.
Figure 3-1 Network Topology
RADIUS Server 1
192.168.0.10/24
Auth Port:1812
RADIUS Server 2
192.168.0.20/24
Auth Port: 1812
Switch Administrator
Management Network
3.2 Configuration Scheme
To implement this requirement, the senior administrator can create the login account
and the Enable password on the two RADIUS servers, and configure the AAA feature
on the switch. The IP addresses of the two RADIUS servers are 192.168.0.10/24 and
192.168.0.20/24; the authentication port number is 1812; the shared key is 123456.
The overview of configuration on the switch is as follows:
1) Add the two RADIUS servers on the switch.
2) Create a new RADIUS server group and add the two servers to the group. Make sure
that RADIUS Server 1 is the first server for authentication.
3) Configure the method list.
4) Configure the AAA application list.

TP-Link T2600G Series Specifications

General

Model	T2600G Series
Layer	Layer 2+
Type	Managed
Uplink Ports	4 x Gigabit SFP slots
VLAN	4K VLANs
QoS	8 priority queues
Management	Web-based GUI, CLI, SNMP, RMON
Standards and Protocols	IEEE 802.3i, IEEE 802.3u, IEEE 802.3ab, IEEE 802.3z, IEEE 802.3ad, IEEE 802.3x, IEEE 802.1d, IEEE 802.1s, IEEE 802.1w, IEEE 802.1q, IEEE 802.1p, IEEE 802.3af, IEEE 802.3at
Interface	RJ45
L2 Features	STP, RSTP, MSTP, LACP, IGMP Snooping
L3 Features	Static Routing
Security	802.1X, Port Security, DHCP Snooping, IP Source Guard, DoS Defend, ARP Inspection, SSH, SSL, ACL
MAC Address Table	16K
Jumbo Frame	9KB
Operating Temperature	0°C to 40°C
Storage Temperature	-40°C to 70°C
Operating Humidity	10% to 90% RH non-condensing
Storage Humidity	5% to 90% non-condensing