Chapter 7: Security
7.6 AAA
This section shows you how to use an AAA (Authentication, Authorization, Accounting) server to provide access control to your network. The AAA server can be a TACACS+ or RADIUS server to create and manage objects that contain settings for using AAA servers.
7.6.1 Configuration
This section describes how to configure AAA setting of TACACS+ or RADIUS server.
Web Interface
To configure a common configuration of AAA in the Web interface:
1.Set timeout (Default is 15 seconds).
2.Set dead time (Default is 300 seconds).
To configure a TACACS+ authorization and accounting configuration of AAA in the Web interface:
1.Select “Enabled” in the authorization.
2.Select “Enabled” in the failback to local authorization.
3.Select “Enabled” in the account.
To configure a RADIUS authentication server configuration of AAA in the Web interface:
1.Check “Enabled.”
2.Specify IP address or hostname for radius erver.
3.Specify authentication port for radius server (default is 1812).
4.Specify the secret with radius server.
To configure a RADIUS accounting server configuration of AAA in the Web interface:
1.Check “Enabled.”
2.Specify IP address or hostname for radius server.
3.Specify accounting port for radius server (default is 1813).
4.Specify the secret with radius server.
To configure a TACACS+ authentication server configuration of AAA in the Web interface:
1.Check “Enabled.”
2.Specify IP address or hostname for TACACS+ server.
3.Specify authentication port for TACACS+ server (default is 49).
4.Specify the secret with TACACS+ server.
Figure 7-14. The Authentication Server Configuration screen.
Page 192 | LGB5028A User‘s Manual | |
|
|
