D-Link TM DES-6500, Руководство пользователя

Страница: 209 / 353

xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch User Manual
Authentication Server Group
This window will allow users to set up Authentication Server Groups on the Switch. A server group is a technique used to group
TACACS/XTACACS//RADIUS server hosts into user-defined categories for authentication using method lists. The
user may define the type of server group by protocol or by previously defined server group. The Switch has three built-in
Authentication Server Groups that cannot be removed but can be modified. Up to eight authentication server hosts may be added
to any particular group.
To view the following window, click Security Management > Access Authentication Control > Authentication Server
Group :
Figure 7- 1 . Authentication Server Group window 1
This screen displays the Authentication Server Groups on the Switch. The Switch has four built-in Authentication Server Groups
that cannot be removed but can be modified. To modify a particular group, click its hyperlinked
Group Name , which will then
display the following window.
Figure 7- 12. Add a Server Host to Server Group (XTACACS) window.
To add an Authentication Server Host to the list, enter its IP address in the IP Address field, choose the protocol associated with
the IP address of the Authentication Server Host and click
Add to add this Authentication Server Host to the group.
To add a server group other than the ones listed, click the add button, revealing the following window to configure.
Figure 7- 13. Authentication Server Group Table Add Settings window
Enter a group name of up to 15 characters into the Group Name field and click Apply . The entry should appear in the
Authentication Server Group Settings window, as shown in Figure 8-12 (Trinity).
NOTE: The user must configure Authentication Server Hosts using the Authentication Server
Hosts window before adding hosts to the list. Authentication Server Hosts must be configured for
their specific protocol on a remote centralized server before this function can work properly.
NOTE: The three built in server groups can only have server hosts running the same TACACS
daemon. TACACS/XTACACS/ protocols are separate entities and are not compatible
with each other.
194