Web Management Guide

Chapter 11 | Security Measures
AAA Authentication, Authorization and Accounting
– 239 –
between the authentication server and logon client. This switch can pass
authentication messages between the server and client that have been
encrypted using MD5 (Message-Digest 5), TLS (Transport Layer Security), or
TTLS (Tunneled Transport Layer Security).
Parameters
These parameters are displayed:
Configure Server
Server Type – Select RADIUS or TACACS+ server.
◆ RADIUS
■
Global – Provides globally applicable RADIUS settings.
■
Server Index – Specifies one of five RADIUS servers that may be
configured. The switch attempts authentication using the listed sequence
of servers. The process ends when a server either approves or denies access
to a user.
■
Server IP Address – Address of authentication server.
(A Server Index entry must be selected to display this item.)
■
Authentication Server UDP Port – Network (UDP) port on authentication
server used for authentication messages. (Range: 1-65535; Default: 1812)
■
Authentication Timeout – The number of seconds the switch waits for a
reply from the RADIUS server before it resends the request. (Range: 1-60;
Default: 5)
■
Authentication Retries – Number of times the switch tries to authenticate
logon access via the authentication server. (Range: 1-5; Default: 2)
■
Set Key – Mark this box to set or modify the encryption key.
■
Authentication Key – Encryption key used to authenticate logon access
for client. Enclose any string containing blank spaces in double quotes.
(Maximum length: 48 characters)
■
Confirm Authentication Key – Re-type the string entered in the previous
field to ensure no errors were made. The switch will not change the
encryption key if these two fields do not match.
◆ TACACS+
■
Global – Provides globally applicable TACACS+ settings.
■
Server Index – Specifies the index number of the server to be configured.
The switch currently supports only one TACACS+ server.