User`s guide

VigorSwitch P2261 User’s Guide
196
enable this feature, but only if more than one server has
been configured.
TACACS + Authorization and Accounting Configuration
Authorization
Every CLI commands will be authorized by
TACACS+ server when enable. The authorization
table on the TACACS+ server is able to configure
which CLI command can pass successfully. For
example, TACACS+ server is set to accept STP
command but deny VLAN command. The server will
block the command related to STP which entered by
user, but it can allow VLAN command to configure
successfully when user enter VLAN command.
Fallback to Local
Authorization
Enable to allow the user who typed wrong account or
password to login successfully when the user account
is on the local authorization list of the local switch. For
example, when user entered the wrong account or
password, TACACS+ server will refer to the account
information on the local end of switch. If the account is
recorded on the local switch, the user will be
authorized to login with the privilege level set on the
local switch.
Accounting
Enable to record all the command users entered. All
the log data will be recorded on the server when
enable. For instance, login time, log out time, IGMP
setting, VLAN setting, etc.
RADIUS Authentication Server Configuration
Enabled Enable the RADIUS Authentication Server by checking this
box.
IP Address/Hostname The IP address or hostname of the RADIUS Authentication
Server. IP address is expressed in dotted decimal notation.
Port The UDP port to use on the RADIUS Authentication
Server. If the port is set to 0 (zero), the default port (1812) is
used on the RADIUS Authentication Server.
Secret The secret - up to 29 characters long - shared between the
RADIUS Authentication Server and the switch stack.
RADIUS Accounting Server Configuration
Enabled Enable the RADIUS Accounting Server by checking this
box.
IP Address/Hostname The IP address or hostname of the RADIUS Accounting
Server. IP address is expressed in dotted decimal notation.
Port The UDP port to use on the RADIUS Accounting Server. If
the port is set to 0 (zero), the default port (1813) is used on
the RADIUS Accounting Server.
Secret The secret - up to 29 characters long - shared between the
RADIUS Accounting Server and the switch stack.