D-Link xStack DES-6500 User Manual - Authentication Server Group
xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual
Authentication Server Group
This window will allow users to set up
Authentication Server Groups
on the Switch. A server group is a technique used to
group TACACS/XTACACS/TACACS+/RADIUS server hosts into user-defined categories for authentication using
method lists. The user may define the type of server group by protocol or by previously defined server group. The Switch
has three built-in Authentication Server Groups that cannot be removed but can be modified. Up to eight authentication
server hosts may be added to any particular group.
To view the following window, click
Security Management > Access Authentication Control > Authentication Server
Group
:
Figure 7- 11. Authentication Server Group window
This screen displays the Authentication Server Groups on the Switch. The Switch has four built-in Authentication Server
Groups that cannot be removed but can be modified. To modify a particular group, click its hyperlinked
Group Name
,
which will then display the following window.
Figure 7- 12. Add a Server Host to Server Group (XTACACS) window.
To add an Authentication Server Host to the list, enter its IP address in the IP Address field, choose the protocol associated
with the IP address of the Authentication Server Host and click
Add
to add this Authentication Server Host to the group.
To add a server group other than the ones listed, click the add button, revealing the following window to configure.
Figure 7- 13. Authentication Server Group Table Add Settings window
Enter a group name of up to 15 characters into the
Group Name
field and click
Apply
. The entry should appear in the
Authentication Server Group Settings
window, as shown in Figure 8-12 (Trinity).
NOTE:
The user must configure Authentication Server Hosts using the Authentication Server
Hosts window before adding hosts to the list. Authentication Server Hosts must be configured for
their specific protocol on a remote centralized server before this function can work properly.
NOTE:
The three built in server groups can only have server hosts running the same TACACS
daemon. TACACS/XTACACS/TACACS+ protocols are separate entities and are not compatible
with each other.
196