User manual

APS User Manual
289
Setting the Dead Time to a value greater than 0 (zero) will enable this
feature, but only if more than one server has been configured.
TACACS+ Authorization and Accounting Configuration
Authorisation: Every command will be authorized by the TACACS+ server when enabled.
The authorization table on the TACACS+ server is able to configure which
command can be passed successfully. For example, TACACS+ server is set to
accept STP command but deny VLAN command. The server will block any
commands related to VLAN’s entered by the user, but it will allow STP
commands to be configured when entered by the user
Fallback to Local Auth: Enable to allow the user who typed wrong account or password to login
successfully when the user account is on the local authorization list of the
local switch. For example, when user entered the wrong account or
password, TACACS+ server will refer to the account information on the local
end of switch. If the account is recorded on the local switch, the user will be
authorized to login with the privilege level set on the local switch.
Accounting: Enable to record all commands entered by a specific user. All the log data
will be recorded on the server when enabled. For instance, login time, log
out time, IGMP setting, VLAN setting, etc.
RADIUS Authentication Server Configuration
#: The RADIUS Authentication Server number for which the configuration
below applies.
Enabled: Enable the RADIUS Authentication Server by checking this box.
IP Address/Hostname: The IP address or hostname of the RADIUS Authentication Server. IP address
is expressed in dotted decimal notation.
Port: The UDP port to use on the RADIUS Authentication Server. If the port is set
to 0 (zero), the default port (1812) is used on the RADIUS Authentication
Server.
Secret: The secret - up to 29 characters long - shared between the RADIUS
Authentication Server and the switch.
RADIUS Accounting Server Configuration
#: The RADIUS Accounting Server number for which the configuration below
applies.
Enabled: Enable the RADIUS Accounting Server by checking this box.