Chapter 25 Authentication and Accounting
VES1724-56 User’s Guide
237
25.1.2 RADIUS and TACACS+
RADIUS and TACACS+ are security protocols used to authenticate users by means of an external
server instead of (or in addition to) an internal device user database that is limited to the memory
capacity of the device. In essence, RADIUS and TACACS+ authentication both allow you to validate
an unlimited number of users from a central location.
The following table describes some key differences between RADIUS and TACACS+.
25.2 Authentication and Accounting Screens
To enable authentication on the Switch. First, configure your authentication server settings
(RADIUS, TACACS+ or both) and then set up the authentication priority and accounting settings.
Click Advanced Application > Auth and Acct in the navigation panel to display the screen as
shown.
Figure 143 Advanced Application > Auth and Acct
25.2.1 RADIUS Server Setup
Use this screen to configure your RADIUS server settings. See Section 25.1.2 on page 237 for more
information on RADIUS servers and Section 25.3 on page 245 for RADIUS attributes utilized by the
Table 101 RADIUS vs. TACACS+
RADIUS TACACS+
Transport Protocol UDP (User Datagram Protocol) TCP (Transmission Control Protocol)
Encryption Encrypts the password sent for
authentication.
All communication between the client (the
Switch) and the TACACS server is encrypted.
To Next Page
Loading...
