Chapter 24 AAA
GS3700/XGS3700 Series User’s Guide
257
The following table describes the labels in this screen.
24.2.3 AAA Setup
Use this screen to configure authentication, authorization and accounting settings on the Switch.
Click on the AAA Setup link in the AAA screen to view the screen as shown.
Table 114 Advanced Application > AAA > TACACS+ Server Setup
LABEL DESCRIPTION
Authentication
Server
Use this section to configure your TACACS+ authentication settings.
Mode This field is only valid if you configure multiple TACACS+ servers.
Select index-priority and the Switch tries to authenticate with the first configured
TACACS+ server, if the TACACS+ server does not respond then the Switch tries to
authenticate with the second TACACS+ server.
Select round-robin to alternate between the TACACS+ servers that it sends
authentication requests to.
Timeout Specify the amount of time in seconds that the Switch waits for an authentication request
response from the TACACS+ server.
If you are using index-priority for your authentication and you are using two TACACS+
servers then the timeout value is divided between the two TACACS+ servers. For example,
if you set the timeout value to 30 seconds, then the Switch waits for a response from the
first TACACS+ server for 15 seconds and then tries the second TACACS+ server.
Index This is a read-only number representing a TACACS+ server entry.
IP Address Enter the IP address of an external TACACS+ server in dotted decimal notation.
TCP Port The default port of a TACACS+ server for authentication is 4 9 . You need not change this
value unless your network administrator instructs you to do so.
Shared Secret Specify a password (up to 32 alphanumeric characters) as the key to be shared between
the external TACACS+ server and the Switch. This key is not sent over the network. This
key must be the same on the external TACACS+ server and the Switch.
Delete Check this box if you want to remove an existing TACACS+ server entry from the Switch.
This entry is deleted when you click Apply.
Accounting
Server
Use this section to configure your TACACS+ accounting settings.
Timeout Specify the amount of time in seconds that the Switch waits for an accounting request
response from the TACACS+ server.
Index This is a read-only number representing a TACACS+ accounting server entry.
IP Address Enter the IP address of an external TACACS+ accounting server in dotted decimal
notation.
TCP Port The default port of a TACACS+ accounting server is 49. You need not change this value
unless your network administrator instructs you to do so.
Shared Secret Specify a password (up to 32 alphanumeric characters) as the key to be shared between
the external TACACS+ accounting server and the Switch. This key is not sent over the
network. This key must be the same on the external TACACS+ accounting server and the
Switch.
Delete Check this box if you want to remove an existing TACACS+ accounting server entry from
the Switch. This entry is deleted when you click Apply.
Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses
these changes if it is turned off or loses power, so use the Save link on the top navigation
panel to save your changes to the non-volatile memory when you are done configuring.
Cancel Click Cancel to begin configuring this screen afresh.
To Next Page
Loading...
