Authentication Server Hosts - D-Link DES-3550 Manual

This screen displays the Authentication Server Groups on the Switch. The Switch has three built-in Authentication Server
Groups that cannot be removed but can be modified. To modify a particular group, click its hyperlinked Group Name,
which will then display the following window.
Figure 7- 8. Add a Server Host to Server Group (tacacs) window.
To add an Authentication Server Host to the list, enter its IP address in the IP Address field, choose the protocol associated
with the IP address of the Authentication Server Host and click ADD to Group to add this Authentication Server Host to
the group.

Authentication Server Hosts

This window will set user-defined Authentication Server Hosts for the TACACS / XTACACS / TACACS+ / RADIUS
security protocols on the Switch. When a user attempts to access the Switch with Authentication Policy enabled, the
Switch will send authentication packets to a remote TACACS / XTACACS / TACACS+ / RADIUS server host on a
remote host. The TACACS / XTACACS / TACACS+ / RADIUS server host will then verify or deny the request and return
the appropriate message to the Switch. More than one authentication protocol can be run on the same physical server host
DES-3550 Fast Ethernet Layer 2 Switch
Figure 7- 7. Authentication Server Group Settings window
NOTE: The user must configure Authentication Server Hosts using the
Authentication Server Hosts window before adding hosts to the list.
Authentication Server Hosts must be configured for their specific protocol
on a remote centralized server before this function can work properly.
NOTE: The three built in server groups can only have server hosts running
the same TACACS daemon. TACACS/XTACACS/TACACS+ protocols are
separate entities and are not compatible with each other.
118