D-Link DSA-3200 Technical Information download pdf (Page 178)

xStack

DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide

164

through its Authentication Server Hosts and no authentication is returned, the Switch will then go to the next technique listed in

the server group for authentication, until the authentication has been verified or denied, or the list is exhausted.

Please note that users granted access to the Switch will be granted normal user privileges on the Switch. To gain access to

administrator level privileges, the user must access the Enable Admin window and then enter a password, which was previously

configured by the administrator of the Switch.

NOTE: TACACS, XTACACS and TACACS+ are separate entities and are not

compatible. The Switch and the server must be configured exactly the same, using the

same protocol. (For example, if the Switch is set up for TACACS authentication, so

must be the host server.)

Enable Admin

Users who have logged on to the Switch on the normal user level and wish to be promoted to the administrator level can use this

window. After logging on to the Switch, users will have only user level privileges. To gain access to administrator level

privileges, the user will open this window and will have to enter an authentication password. Possible authentication methods for

this function include TACACS/XTACACS/TACACS+/RADIUS, user defined server groups, local enable (local account on the

Switch), or no authentication (none). Because XTACACS and TACACS do not support the enable function, the user must create a

special account on the server host, which has the username "enable", and a password configured by the administrator that will

support the "enable" function. This function becomes inoperable when the authentication policy is disabled.

To view the following window, click Security > Access Authentication Control > Enable Admin:

Figure 6 - 44. Enable Admin window

When this window appears, click the Enable Admin button revealing a window for the user to enter authentication (password,

username), as seen below. A successful entry will promote the user to Administrator level privileges on the Switch.

Authentication Policy Settings

Users can enable an administrator-defined authentication policy for users trying to access the Switch. When enabled, the device

will check the Login Method List and choose a technique for user authentication upon login.

To view the following window, click Security > Access Authentication Control > Authentication Policy Settings:

Figure 6 - 45. Authentication Policy Settings window

The following parameters can be set:

Parameter Description

Authentication Policy

Use the drop-down menu to enable or disable the Authentication Policy on the Switch.

1 2 ... 173 174 175 176 177 178 179 180 181 182 183 ... 320 321

No comments

D-Link DSA-3200 Technical Information Page 178