Trusted Host; Access Authentication Control - D-Link DES-1228/ME User Manual

Trusted Host

To view the Trusted Host settings on the switch, click Security > Trusted Host.
Use the Security IP Management to permit remote stations to manage the Switch. If one or more designated management stations
are chosen to define, only the chosen stations, as defined by their IP addresses, will be allowed management privileges through the
web manager, the Telnet session or the SNMP manager. To manage the Switch the user must enter the IP address or the IP
submask and then click the Apply button to implement the setting. To remove an individual security IP address from the Switch
click the corresponding
button.
This window displays the following information:
Parameter
Add Trusted Host IP
Add Trusted Host IP
Submask

Access Authentication Control

The TACACS/XTACACS/TACACS+/RADIUS commands allow users to secure access to the Switch using the
TACACS/XTACACS/TACACS+/RADIUS protocols. When a user logs in to the Switch or tries to access the administrator level
privilege, he or she is prompted for a password. If TACACS/XTACACS/TACACS+/RADIUS authentication is enabled on the
Switch, it will contact a TACACS/XTACACS/TACACS+/RADIUS server to verify the user. If the user is verified, he or she is
granted access to the Switch.
There are currently three versions of the TACACS security protocol, each a separate entity. The Switch's software supports the
following versions of TACACS:
•
TACACS (Terminal Access Controller Access Control System) - Provides password checking and authentication,
and notification of user actions for security purposes utilizing via one or more centralized TACACS servers, utilizing
the UDP protocol for packet transmission.
•
Extended TACACS (XTACACS) - An extension of the TACACS protocol with the ability to provide more types
of authentication requests and more types of response codes than TACACS. This protocol also uses UDP to transmit
packets.
•
TACACS+ (Terminal Access Controller Access Control System plus) - Provides detailed access control for
authentication for network devices. TACACS+ is facilitated through Authentication commands via one or more
DES-1228/ME Layer 2 Fast Ethernet Managed Switch
Figure 10-27. Trusted Host window
button under the delete heading. To remove all security IP addresses from the Switch, click the
Description
Enter an IP Address or a list of IP Addresses including your own that will be given permission to
access the Switch.
Enter a list of Trusted Host IP Submasks that will be given permission to access the Switch.
171