D-Link DES-3552 [136/260] Authentication server group settings

DES-3550 Fast Ethernet Layer 2 Switch

Authentication Server Group Settings

This window will allow users to set up Authentication Server Groups on the Switch. A server group is a technique used to

group TACACS/XTACACS/TACACS+/RADIUS server hosts into user-defined categories for authentication using

method lists. The user may define the type of server group by protocol or by previously defined server group. The Switch

has three built-in Authentication Server Groups that cannot be removed but can be modified. Up to eight authentication

server hosts may be added to any particular group.

To view the following window, click Security Management > Access Authentication Control > Authentication Server

Group:

Figure 7- 7. Authentication Server Group Settings window

This screen displays the Authentication Server Groups on the Switch. The Switch has three built-in Authentication Server

Groups that cannot be removed but can be modified. To modify a particular group, click its hyperlinked Group Name,

which will then display the following window.

Figure 7- 8. Add a Server Host to Server Group (tacacs) window

To add an Authentication Server Host to the list, enter its IP address in the IP Address field, choose the protocol associated

with the IP address of the Authentication Server Host and click Add to Group to add this Authentication Server Host to

the group.

NOTE: The user must configure Authentication Server Hosts using the Authentication Server

Hosts window before adding hosts to the list. Authentication Server Hosts must be configured

for their specific protocol on a remote centralized server before this function can work properly.

NOTE: The three built in server groups can only have server hosts running the same

TACACS daemon. TACACS/XTACACS/TACACS+ protocols are separate entities and are

not compatible with each other.

122