D-Link DGS-3700 User Manual download pdf (Page 118)

DAS-3626 VDSL2 Switch User Manual

5 - Login Method Lists menu

The switch contains one Method List that is set and cannot be removed, yet can be modified. To delete a Login

Method List defined by the user, click the corressponding Delete button. To modify a Login Method List, click on its

corresponding Edit button.

To define a Login Method List, set the following parameters and click Apply:

Parameter Description

Method List Name Enter a method list name defined by the user of up to 15 characters.

Priority 1, 2, 3, 4 The user may add one, or a combination of up to four of the following authentication

methods to this method list:

tacacs – Adding this parameter will require the user to be authenticated using the TACACS

protocol from a remote TACACS server.

xtacacs – Adding this parameter will require the user to be authenticated using the

XTACACS protocol from a remote XTACACS server.

tacacs+ – Adding this parameter will require the user to be authenticated using the

TACACS+ protocol from a remote TACACS+ server.

radius – Adding this parameter will require the user to be authenticated using the RADIUS

protocol from a remote RADIUS server.

server_group – Adding this parameter will require the user to be authenticated using a user-

defined server group previously configured on the switch.

local – Adding this parameter will require the user to be authenticated using the local user

account database on the switch.

none – Adding this parameter will require no authentication to access the switch.

Enable Method Lists

The Enable Method List Settings window is used to set up Method Lists to promote users with user level privileges

to Administrator (Admin) level privileges using authentication methods on the switch. Once a user acquires normal

user level privileges on the switch, he or she must be authenticated by a method on the switch to gain administrator

privileges on the switch, which is defined by the Administrator. A maximum of eight Enable Method Lists can be

implemented on the switch, one of which is a default Enable Method List. This default Enable Method List cannot be

deleted but can be configured.

The sequence of methods implemented in this command will affect the authentication result. For example, if a user

enters a sequence of methods like TACACS - XTACACS - Local Enable, the switch will send an authentication

request to the first TACACS host in the server group. If no verification is found, the switch will send an authentication

request to the second TACACS host in the server group and so on, until the list is exhausted. At that point, the switch

will restart the same sequence with the following protocol listed, XTACACS. If no authentication takes place using the

XTACACS list, the Local Enable password set in the switch is used to authenticate the user.

Successful authentication using any of these methods will give the user an "Admin" privilege.

118

1 2 ... 113 114 115 116 117 118 119 120 121 122 123 ... 176 177

No comments

D-Link DGS-3700 User Manual Page 118