24

AAA

24.1 Overview

This chapter describes how to configure authentication and authorization settings on the Switch.

The external servers that perform authentication and authorization functions are known as AAA servers. The Switch supports RADIUS (Remote Authentication Dial- In User Service, see Section on page 210) and TACACS+ (Terminal Access Controller Access-Control System Plus, see Section on page 210) as external authentication and authorization servers.

Figure 110 AAA Server

Client

AAA Server

24.1.1What You Can Do

Use the AAA screen (Section 24.2 on page 210) to enable authentication and authorization or both of them on the Switch.

use the Radio Server Setup screen (Section 24.3 on page 211) to configure your RADIUS server settings.

Use the TACACS+ Server Setup screen (Section 24.4 on page 213) to configure your TACACS+ authentication settings.

Use the AAA Setup screen (Section 24.5 on page 215) to specify the methods used to authenticate users accessing the Switch and specify which database the Switch should use first.

24.1.2What You Need to Know

Authentication is the process of determining who a user is and validating access to the Switch. The Switch can authenticate users who try to log in based on user

 

209

GS2200-24 User’s Guide