User's Manual

User Manual
81
(VPDN) access users. Its typical application is to authenticate, authorize, and
perform accounting for end users who need to login the device. As a Tacacs+
client, the device sends user name and password to the Tacacs+ server for
verification. After authentication and authorization, the user can login the
device for operations.
Method for enabling Tacacs+ server in ER800:
Click "Administration >> AAA >> Tacacs+". In "Server List", enter server
address (domain name/IP address), port, and authentication key, click Add, and
then click Apply & Save.
6.5.3 LDAP
The main advantage of Lightweight Directory Access Protocol (LDAP) lies in its
quick response to users' search operations. For example, there will be massive
user authentication operations perform concurrently. It will be inefficient if use
database, because database is divided into various tables and will synthesise
and filter in every searching. LDAP is equivalent to one table, and requires only
user name, password, and some other parameters, which is quite simple. It can
meet the authentication requirement regarding the efficiency and structure.