ZyXEL Communications NXC Series - Page 303

Chapter 25 AAA Server
NXC Series User’s Guide
303
4 If it matches, the user is allowed access. Otherwise, access is blocked.
RADIUS Server
RADIUS (Remote Authentication Dial-In User Service) authentication is a popular protocol used to
authenticate users by means of an external server instead of (or in addition to) an internal device user
database that is limited to the memory capacity of the device. In essence, RADIUS authentication
allows you to validate a large number of users from a central location.
Figure 178 RADIUS Server Network Example
Authentication Capability List
This list displays the NXC’s authentication capabilities:
AAA Servers Supported by the NXC
The following lists the types of authentication server the NXC supports.
•Local user database
The NXC uses the built-in local user database to authenticate administrative users logging into the
NXC’s Web Configurator or network access users logging into the network through the NXC.
Table 147 Authentication Capability List
INTERNAL AUTHENTICATION METHOD
EXTERNAL
RADIUS
AD LDAP RADIUS
EAP-TLS OOOO
EAP-TTLS
(Mschapv2/Mschap)
O
A
A. Must set domain authentication.
OOO
EAP-TTLS
(eap)
XXXO
EAP-TTLS
(pap)
OOOO
EAP-PEAP
(Mschapv2)
O
A
OOO
EAP-PEAP
(TLS)
XXXO
EAP-MD5 X X X O