Web Management Guide

Chapter 11 | Security Measures
AAA Authentication, Authorization and Accounting
– 240 –
■
Server IP Address – Address of the TACACS+ server.
(A Server Index entry must be selected to display this item.)
■
Authentication Server TCP Port – Network (TCP) port of TACACS+ server
used for authentication messages. (Range: 1-65535; Default: 49)
■
Authentication Timeout – The number of seconds the switch waits for a
reply from the TACACS+ server before it resends the request. (Range: 1-60;
Default: 5)
■
Authentication Retries – Number of times the switch tries to authenticate
logon access via the authentication server. (Range: 1-5; Default: 2)
■
Set Key – Mark this box to set or modify the encryption key.
■
Authentication Key – Encryption key used to authenticate logon access
for client. Enclose any string containing blank spaces in double quotes.
(Maximum length: 48 characters)
■
Confirm Authentication Key – Re-type the string entered in the previous
field to ensure no errors were made. The switch will not change the
encryption key if these two fields do not match.
Web Interface
To configure the parameters for RADIUS or TACACS+ authentication:
1. Click Security, AAA, Server.
2. Select Configure Server from the Step list.
3. Select RADIUS or TACACS+ server type.
4. Select Global to specify the parameters that apply globally to all specified
servers, or select a specific Server Index to specify the parameters that apply to
a specific server.
5. To set or modify the authentication key, mark the Set Key box, enter the key,
and then confirm it
6. Click Apply.