ZyXEL Communications GS1920v2 Series - TACACS+ Server Setup

Chapter 56 AAA
GS1920v2 Series User’s Guide
347
56.3 TACACS+ Server Setup
Use this screen to configure your TACACS+ server settings. Click SECURITY > AAA > TACACS+ Server Setup
to view the screen as shown.
Shared Secret Specify a password (up to 32 alphanumeric characters except [ ? ], [ | ], [ ' ], [ " ] or [ , ]) as the
key to be shared between the external RADIUS server and the Switch. This key is not sent over
the network. This key must be the same on the external RADIUS server and the Switch.
Encrypted
Shared Secret
This displays the encrypted shared secret in ‘*’ format if you enabled Server Key Encryption in
SECURITY > AAA > AAA Setup.
Note: If you forget the key you set, simply reset the key in the Shared Secret field. If a
key is encrypted, it will remain in the encrypted format even if you later disable
Server Key Encryption in SECURITY > AAA > AAA Setup.
Note: The shared secret displayed in this field does not present the actual length of
the shared secret.
Accounting Server
Use this section to configure your RADIUS accounting server settings.
Timeout Specify the amount of time in seconds that the Switch waits for an accounting request
response from the RADIUS accounting server.
Delete Check this box if you want to remove an existing RADIUS accounting server entry from the
Switch. This entry is deleted when you click Apply.
Index This is a read-only number representing a RADIUS accounting server entry.
IP Address Enter the IP address of an external RADIUS accounting server in dotted decimal notation.
UDP Port The default port of a RADIUS accounting server for accounting is 1813. You need not change
this value unless your network administrator instructs you to do so.
Shared Secret Specify a password (up to 32 alphanumeric characters except [ ? ], [ | ], [ ' ], [ " ] or [ , ]) as the
key to be shared between the external RADIUS accounting server and the Switch. This key is not
sent over the network. This key must be the same on the external RADIUS accounting server
and the Switch.
Encrypted
Shared Secret
This displays the encrypted shared secret in ‘*’ format if you enabled Server Key Encryption in
SECURITY > AAA > AAA Setup.
Note: If you forget the key you set, simply reset the key in the Shared Secret field. If a
key is encrypted, it will remain in the encrypted format even if you later disable
Server Key Encryption in SECURITY > AAA > AAA Setup.
Note: The shared secret displayed in this field does not present the actual length of
the shared secret.
Attribute
Use this section to define the RADIUS server attribute for its account.
NAS-IP-Address Enter the IP address of the NAS (Network Access Server).
Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these
changes if it is turned off or loses power, so use the Save link on the top navigation panel to
save your changes to the non-volatile memory when you are done configuring.
Cancel Click Cancel to begin configuring this screen afresh.
Table 194 SECURITY > AAA > RADIUS Server Setup (continued)
LABEL DESCRIPTION