Table of Contents
Advertisement
xStack® DGS-3620 Series Managed Switch Web UI Reference Guide
Illegal Server Log
Suppress Duration
Unit
From Port / To Port
State
Click the Apply button to accept the changes made for each individual section.
DHCP Offer Permit Entry Settings
Users can add or delete permit entries on this page.
To view this window, click Security > DHCP Server Screening > DHCP Offer Permit Entry Settings as shown
below:
The fields that can be configured are described below:
Parameter
Server IP Address
Client's MAC Address
Ports
Click the Apply button to accept the changes made.
Click the Delete button to remove the specific entry based on the information entered.
Access Authentication Control
The TACACS / XTACACS / TACACS+ / RADIUS commands allow users to secure access to the Switch using the
TACACS / XTACACS / TACACS+ / RADIUS protocols. When a user logs in to the Switch or tries to access the
administrator level privilege, he or she is prompted for a password. If TACACS / XTACACS / TACACS+ / RADIUS
authentication is enabled on the Switch, it will contact a TACACS / XTACACS / TACACS+ / RADIUS server to
verify the user. If the user is verified, he or she is granted access to the Switch.
There are currently three versions of the TACACS security protocol, each a separate entity. The Switch's software
supports the following versions of TACACS:
•
TACACS (Terminal Access Controller Access Control System) - Provides password checking and
authentication, and notification of user actions for security purposes utilizing via one or more centralized
TACACS servers, utilizing the UDP protocol for packet transmission.
•
Extended TACACS (XTACACS) - An extension of the TACACS protocol with the ability to provide more
types of authentication requests and more types of response codes than TACACS. This protocol also uses
UDP to transmit packets.
•
TACACS+ (Terminal Access Controller Access Control System plus) - Provides detailed access
control for authentication for network devices. TACACS+ is facilitated through Authentication commands
via one or more centralized servers. The TACACS+ protocol encrypts all traffic between the Switch and the
TACACS+ daemon, using the TCP protocol to ensure reliable delivery
Choose an illegal server log suppress duration of 1 minute, 5 minutes, or 30
minutes.
Select the unit you want to configure.
A consecutive group of ports may be configured starting with the selected port.
Choose Enabled to enable the DHCP server screening or Disabled to disable it.
The default is Disabled.
Figure 8-62 DHCP Offer Permit Entry Settings window
Description
The IP address of the DHCP server to be permitted.
The MAC address of the DHCP client.
The port numbers of the filter DHCP server. Tick the All Ports check box to include
all the ports on this switch for this configuration.
371
Advertisement
Table of Contents
