Allied Telesis AT-S63 - Manual (Page 647)

AT-S63 Management Software Menus Interface User’s Guide
Section IV: Security 647
Administrative for this attribute gives the username and
password combination Manager access. A value of NAS
Prompt assigns the combination Operator status.
Note
This manual does not explain how to configure TACACS+ or RADIUS
server software. For that you need to refer to the documentation
that came with the software.
❑ You must activate the TACACS+ or RADIUS client software on the
switch using the AT-S63 management software and configure the
settings, which includes the IP addresses of up to three
authentication server. The procedure for this step is found in this
chapter.
By default, authentication protocol is disabled in the AT-S63
management software. After you activate it, you need to provide the
following information:
❑ Which authentication protocol you want to use. Only one
authentication protocol can be active on a switch at a time.
❑ IP addresses of up to three authentication servers.
❑ The encryption key used by the authentication servers.
You can specify up to three RADIUS or TACACS+ servers. Specifying
multiple servers adds redundancy to your network. For example,
removing an authentication server from the network for maintenance
does not prevent network managers from logging into switches if there
are one or two other authentication servers on the network.
When a switch receives a username and password combination from a
network manager, it sends the combination to the first authentication
server in its list. If the server fails to respond, the switch sends the
combination to the next server in the list, and so on.
If no authentication server responds or if no servers have been defined
and you are managing the switch locally, the AT-S63 management
software defaults to the standard manager and operator accounts.
Note
For more information on TACACS+, refer to the RFC 1492 standard.
For more information on RADIUS, refer to the RFC 2865 standard.