ZyXEL Communications ES-2024 Series - IGMP Snooping; IGMP Snooping and VLANs

Chapter 22 AAA
ES-2024 Series User’s Guide
158
22.1.2 RADIUS and TACACS+
RADIUS and TACACS+ are security protocols used to authenticate users by means of an
external server instead of (or in addition to) an internal device user database that is limited to
the memory capacity of the device. In essence, RADIUS and TACACS+ authentication both
allow you to validate an unlimited number of users from a central location.
The following table describes some key differences between RADIUS and TACACS+.
22.2 AAA Screens
To enable authentication, accounting or both on the Switch. First, configure your
authentication server settings (RADIUS, TACACS+ or both) and then set up the
authentication priority and accounting settings.
Click Advanced Application > AAA in the navigation panel to display the screen as shown.
Figure 90 Advanced Application > AAA
22.2.1 RADIUS Server Setup
Use this screen to configure your RADIUS server settings. See Section 22.1.2 on page 158 for
more information on RADIUS servers. Click on the RADIUS Server Setup link in the AAA
screen to view the screen as shown.
Table 49 RADIUS vs. TACACS+
RADIUS TACACS+
Transport
Protocol
UDP (User Datagram Protocol) TCP (Transmission Control Protocol)
Encryption Encrypts the password sent for
authentication.
All communication between the client (the
Switch) and the TACACS server is
encrypted.