Chapter 25 AAA
XS1930 Series User’s Guide
204
25.1.2 What You Need to Know
Local User Accounts
By storing user profiles locally on the Switch, your Switch is able to authenticate and authorize users
without interacting with a network AAA server. However, there is a limit on the number of users you may
authenticate in this way (See
).
RADIUS
RADIUS is a security protocol used to authenticate users by means of an external server instead of (or in
addition to) an internal device user database that is limited to the memory capacity of the device. In
essence, RADIUS authentication allows you to validate an unlimited number of users from a central
location.
The following table describes some key features of RADIUS
25.2 AAA Screens
The
AAA
screens allow you to enable authentication and authorization or both of them on the Switch.
First, configure your authentication server settings (RADIUS) and then set up the authentication priority,
activate authorization.
Click
Advanced Application
>
AAA
in the navigation panel to display the screen as shown.
Figure 144
Advanced Application > AAA
25.3 RADIUS Server Setup
Use this screen to configure your RADIUS server settings. See
for more information
on RADIUS servers and
for RADIUS attributes utilized by the authentication
features on the Switch. Click on the
RADIUS Server Setup
link in the
AAA
screen to view the screen as
shown.
Table 95 RADIUS
RADIUS
Transport
Protocol
UDP (User Datagram Protocol)
Encryption
Encrypts the password sent for
authentication.
