Authentication Server Hosts - D-Link DES-3526 User Manual

xStack DES-3526 / DES-3526DC Layer 2 Stackable Fast Ethernet Managed Switch User Manual
The new group may be modified in the same way as the other groups, by clicking the hyperlinked name. Yet, unlike the other
groups, the user-defined Group Name can have any combination of Protocol hosts to be in this group. (Ex. tacacs – xtacacs –
tacacs+)
NOTE: The user must configure Authentication Server Hosts using the Authentication Server Hosts
window before adding hosts to the list. Authentication Server Hosts must be configured for their
specific protocol on a remote centralized server before this function can work properly.
NOTE: The three built in server groups can only have server hosts running the same TACACS
daemon. TACACS/XTACACS/TACACS+ protocols are separate entities and are not compatible with
each other.

Authentication Server Hosts

This window will set user-defined Authentication Server Hosts for the TACACS/XTACACS/TACACS+/RADIUS security
protocols on the Switch. When a user attempts to access the Switch with Authentication Policy enabled, the Switch will send
authentication packets to a remote TACACS/XTACACS/TACACS+/RADIUS server host on a remote host. The
TACACS/XTACACS/TACACS+/RADIUS server host will then verify or deny the request and return the appropriate message to
the Switch. More than one authentication protocol can be run on the same physical server host but, remember that
TACACS/XTACACS/TACACS+/RADIUS are separate entities and are not compatible with each other. The maximum supported
number of server hosts is 16.
To view the following window, click Security Management > Access Authentication Control > Authentication Server Host:
To add an Authentication Server Host, click the Add button, revealing the following window:
Figure 7- 10. Authentication Server Group Settings window
Figure 7- 11. Authentication Server Host Settings window
Figure 7- 12. Authentication Server Host Settings – Add window
114