TP-Link TL-SL5428 - Page 101

Configuring the Switch
3-54
3
Command Attributes
• Authentication – Select the authentication, or authentication sequence required:
- Local – User authentication is performed only locally by the switch.
- Radius – User authentication is performed using a RADIUS server only.
- TACACS – User authentication is performed using a TACACS+ server only.
- [authentication sequence] – User authentication is performed by up to three
authentication methods in the indicated sequence.
• RADIUS Settings
- Global – Provides globally applicable RADIUS settings.
- ServerIndex – Specifies one of five RADIUS servers that may be configured.
The switch attempts authentication using the listed sequence of servers. The
process ends when a server either approves or denies access to a user.
- Server IP Address
3
– Address of the RADIUS server. (Default: 10.1.0.1)
- Authentication Port Number – Network (UDP) port of authentication server
used for authentication messages. (Range: 1-65535; Default: 1812)
- Accounting Port Number – UDP port on authentication server used for
accounting messages. (Range: 1-65535; Default: 1813)
- Number of Server Transmits – Number of times the switch tries to authenticate
logon access via the authentication server. (Range: 1-30; Default: 2)
- Timeout for a reply – The number of seconds the switch waits for a reply from
the RADIUS server before it resends the request. (Range: 1-65535; Default: 5)
• TACACS Settings
- Global – Provides globally applicable TACACS+ settings.
- ServerIndex – Specifies the index number of the server to be configured. The
switch currently supports only one TACACS+ server.
- Server IP Address
4
– Address of the TACACS+ server. (Default: 10.11.12.13)
- Server Port Number – Network (TCP) port of TACACS+ server used for
authentication messages. (Range: 1-65535; Default: 49)
- Number of Server Transmits – Number of times the switch tries to authenticate
logon access via the authentication server. (Range: 1-30; Default: 2)
- Timeout for a reply – The number of seconds the switch waits for a reply from
the RADIUS server before it resends the request. (Range: 1-540; Default: 5)
Note:
The local switch user database has to be set up by manually entering user names
and passwords using the Web or CLI. (See “Configuring User Accounts” on
page 3-51 or “username” on page 4-37)
3. A Server Index must be selected to display this item.
4. A Server Index must be selected to display this item.