Loading ...
Loading ...
Loading ...
Chapter 66 AAA
XGS2220 Series User’s Guide
490
66.4 AAA Setup
Use this screen to configure authentication, authorization and accounting settings on the Switch. Click
SECURITY > AAA > AAA Setup to view the screen as shown.
Shared Secret Specify a password (up to 32 alphanumeric characters except [ ? ], [ | ], [ ' ], [ " ], [ space ], or
[ , ]) as the key to be shared between the external TACACS+ server and the Switch. This key is
not sent over the network. This key must be the same on the external TACACS+ server and the
Switch.
Encrypted
Shared Secret
This displays the encrypted shared secret in ‘*’ format if you enabled Server Key Encryption in
SECURITY > AAA > AAA Setup.
Note: If you forget the key you set, simply reset the key in the Shared Secret field. If a
key is encrypted, it will remain in the encrypted format even if you later
disable Server Key Encryption in SECURITY > AAA > AAA Setup.
Note: The shared secret displayed in this field does not present the actual length of
the shared secret.
Accounting Server
Use this section to configure your TACACS+ accounting settings.
Timeout Specify the amount of time in seconds that the Switch waits for an accounting request
response from the TACACS+ server.
Delete Check this box if you want to remove an existing TACACS+ accounting server entry from the
Switch. This entry is deleted when you click Apply.
Index This is a read-only number representing a TACACS+ accounting server entry.
IP Address Enter the IP address of an external TACACS+ accounting server in dotted decimal notation.
TCP Port The default port of a TACACS+ accounting server is 49. You need not change this value unless
your network administrator instructs you to do so.
Shared Secret Specify a password (up to 32 alphanumeric characters except [ ? ], [ | ], [ ' ], [ " ], [ space ], or
[ , ]) as the key to be shared between the external TACACS+ accounting server and the Switch.
This key is not sent over the network. This key must be the same on the external TACACS+
accounting server and the Switch.
Encrypted
Shared Secret
This displays the encrypted shared secret in ‘*’ format if you enabled Server Key Encryption in
SECURITY > AAA > AAA Setup.
Note: If you forget the key you set, simply reset the key in the Shared Secret field. If a
key is encrypted, it will remain in the encrypted format even if you later
disable Server Key Encryption in SECURITY > AAA > AAA Setup.
Note: The shared secret displayed in this field does not present the actual length of
the shared secret.
Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these
changes if it is turned off or loses power, so use the Save link on the top navigation panel to
save your changes to the non-volatile memory when you are done configuring.
Cancel Click Cancel to begin configuring this screen afresh.
Table 253 SECURITY > AAA > TACACS+ Server Setup (continued)
LABEL DESCRIPTION
Loading ...
Loading ...
Loading ...