Authentication Server - D-Link DGS-3700 Series User Manual

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual
To add an Authentication Server Host to the list, enter its IP address in the IP Address field, choose the protocol
associated with the IP address of the Authentication Server Host and click Add to add this Authentication Server Host
to the group.
NOTE: The user must configure Authentication Server Hosts using the Authentication
Server Hosts window before adding hosts to the list. Authentication Server Hosts must be
configured for their specific protocol on a remote centralized server before this function
can work properly.
NOTE: The four built in server groups can only have server hosts running the same
TACACS daemon. TACACS/XTACACS/TACACS+ protocols are separate entities and
are not compatible with each other.

Authentication Server

This window will set user-defined Authentication Server Hosts for the TACACS/XTACACS/TACACS+/RADIUS
security protocols on the Switch. When a user attempts to access the Switch with Authentication Policy enabled, the
Switch will send authentication packets to a remote TACACS/XTACACS/TACACS+/RADIUS server host on a remote
host. The TACACS/XTACACS/TACACS+/RADIUS server host will then verify or deny the request and return the
appropriate message to the Switch. More than one authentication protocol can be run on the same physical server
host but, remember that TACACS/XTACACS/TACACS+/RADIUS are separate entities and are not compatible with
each other. The maximum supported number of server hosts is 16.
To view this window, click Security > Access Authentication Control > Authentication Server as shown below:
Configure the following parameters to add an Authentication Server Host:
Parameter Description
Figure 5 - 38 Authentication Server Group Settings Edit window
Figure 5 - 39 Authentication Server Settings window
175