Home » D-Link Manuals » Hubs & Switches » D-Link 3100 24 » Manual Viewer

D-Link 3100 24 User Manual - Page 126

Configuring Authentication Server Hosts

UPC - 790069305122

Add to My Manuals
Save this manual to your list of manuals

Page 126 highlights

DGS-3100 Series Gigabit Stackable Managed Switch User Manual Configuring Authentication Server Hosts The Authentication Server is a remote device connected to the same network as the Client and Authenticator. Users are authenticated using either RADIUS or TACACS+, and must be authenticated by the server before attaining network access. To define the Authentication Server information: 1. Click Security > Access Authentication Control> Authentication Server Host. The Authentication Server Host Page opens: Figure 5-18. Authentication Server Host Page The Authentication Server Host Page contains the following fields: Field IP Address Description Defines the IP address of the RADIUS or TACACS+ server authenticating network users. Protocol Indicates the authentication protocol used to authenticate network users. The possible field values are: RADIUS - Indicates that network users are authenticated via a RADIUS server. TACACS+ - Indicates that network users are authenticated via a TACACS+ server. Key Defines the key used to authenticate network users. The key may contain up to 128 characters Priority Defines the priority assigned to the server. The field range is First -Third, where Third is the lowest priority and First is the highest priority. Port (1-65535) The port number for authentication requests. The host is not used for authentication if set to 0. If unspecified, the Radius port number defaults to 1812, TACACS+ port number defaults to 49. Timeout (1-30secs) Indicates the amount of time that passes, in which no authentication activity occurs, after which the authentication session times out. Retransmit (1-10 times) Indicates the number of times the port attempts to re- authenticate a timed out session. 2. Define the IP Address, Protocol, Key, Port, Timeout, and Retransmit fields. 114

Section	Page
Preface	6
System Overview	7
Viewing the Device	7
DGS-3100 Series Front Panel	7
DGS-3100 Series Front Panel	7
Device Management Methods	8
User Guide Overview	9
Notes, Notices, and Cautions	9
Safety Cautions	9
General Precautions for Rack-Mountable Products	11
GETTING STARTED	13
Using the Web-Based User Interface	13
Understanding the D-Link Embedded Web Interface	13
Using the Tool Menu	15
Displaying the Stack Status	15
Locating Devices	15
Backing up and Restoring Configuration Files	16
Resetting the Device	17
Downloading the Firmware	18
Rebooting the System	20
Using the Web System Components	21
CONFIGURING BASIC CONFIGURATION	22
Viewing Device Information	23
Defining System Information	25
Defining IP Addresses	26
Managing Stacking	27
Managing Stacking Modes	27
Advanced Stacking	27
Stack Startup Process	29
Building Stacks – Quick Start	31
Stack Management Examples	32
Configuring Stacking	38
Defining Ports	39
Configuring Port Properties	39
Viewing Port Properties	41
ARP Settings	42
Configuring User Accounts	43
Managing System Logs	45
Configuring SNTP	46
Configuring Daylight Savings Time	48
Configuring SNMP	52
Defining SNMP Views	53
Defining SNMP Groups	54
Defining SNMP Users	56
Defining SNMP Communities	58
Defining SNMP Host Table	59
Defining SNMP Engine ID	61
Enabling SNMP Traps	62
DHCP Auto Configuration	63
Dual Image Services	64
Firmware Information	64
Config Firmware Image	65
CONFIGURING L2 FEATURES	66
Enabling Jumbo Frames	67
Configuring VLANs	68
Understanding IEEE 802.1p Priority	68
VLAN Description	68
Notes about VLANs on the DGS-3100 Series	68
IEEE 802.1Q VLANs	68
802.1Q VLAN Tags	70
Port VLAN ID	71
Tagging and Untagging	71
Ingress Filtering	71
Default VLANs	72
VLAN and Trunk Groups	72
VLAN Status	72
Defining VLAN Properties	73
Configuring GVRP	75
Defining Trunking	77
Traffic Segmentation	79
Configuring LACP	80
Defining IGMP Snooping	81
Configuring Port Mirroring	84
Configuring Spanning Tree	86
Defining Spanning Tree Global Parameters	87
Defining STP Port Settings	89
Defining Multiple Spanning Tree Configuration Identification	91
Defining MSTP Port Information	92
Defining Forwarding and Filtering	94
Defining Unicast Forwarding	94
Defining Multicast Forwarding	95
CONFIGURING QUALITY OF SERVIC	97
Understanding QoS	99
Defining Bandwidth Settings	100
Configuring Storm Control	101
Mapping Ports to Packet Priorities	102
Mapping Priority to Classes (Queues)	103
Configuring QoS Scheduling Mechanism	104
Defining Multi-Layer CoS Settings	105
SECURITY FEATURES	106
Configuring Safeguard Engine	107
Configuring Trust Host	108
Configuring Port Security	109
Configuring Guest VLANs	110
Configuring Port Authentication 802.1X	111
Configuring MAC Authentication (by using Guest VLAN, 802.1X and Radius pages)	116
Defining RADIUS Settings	119
Configuring Secure Socket Layer Security	120
Configuring Secure Shell Security	122
Defining SSH Algorithm Settings	123
Defining Application Authentication Settings	125
Configuring Authentication Server Hosts	126
Defining Login Methods	127
Defining Enable Methods	129
Configuring Local Enable Password	131
MONITORING THE DEVICE	132
Viewing Stacking Information	133
Viewing CPU Utilization	134
Viewing Port Utilization	135
Viewing Packet Size Information	136
Viewing Received Packet Statistics	137
Viewing UMB_cast Packet Statistics	138
Viewing Transmitted Packet Statistics	139
Viewing RADIUS Authenticated Session Statistics	141
Viewing ARP Table	142
Viewing Router Ports	143
Viewing Session Table	144
Viewing IGMP Group Information	145
Defining Dynamic and Static MAC Addresses	146
Viewing System Log	148
MANAGING POWER OVER ETHERNET DEVICES	149
Defining PoE System Information	150
Displaying and Editing PoE System Information	152
DEFINING ACCESS PROFILE LISTS	153
ACL Configuration Wizard	154
Defining Access Profile Lists	156
Defining Access Rules Lists	169

Match case Limit results 1 per page

DGS-3100 Series Gigabit Stackable Managed Switch User Manual

114

Configuring Authentication Server Hosts

The Authentication Server is a remote device connected to the same network as the Client and Authenticator. Users are

authenticated using either RADIUS or TACACS+, and must be authenticated by the server before attaining network access.

To define the Authentication Server information:

Click

Security > Access Authentication Control> Authentication Server Host

. The

Authentication Server Host

Page

opens:

Figure 5-18. Authentication Server Host Page

The

Authentication Server Host Page

contains the following fields:

Field

Description

IP Address

Defines the IP address of the RADIUS or TACACS+ server authenticating network users.

Protocol

Indicates the authentication protocol used to authenticate network users. The possible

field values are:

RADIUS

— Indicates that network users are authenticated via a RADIUS server.

TACACS+

— Indicates that network users are authenticated via a TACACS+ server.

Key

Defines the key used to authenticate network users. The key may contain up to 128

characters

Priority

Defines the priority assigned to the server. The field range is First -Third, where Third is

the lowest priority and First is the highest priority.

Port (1-65535)

The port number for authentication requests. The host is not used for authentication if set

to 0. If unspecified, the Radius port number defaults to 1812, TACACS+ port number

defaults to 49.

Timeout (1-30secs)

Indicates the amount of time that passes, in which no authentication activity occurs, after

which the authentication session times out.

Retransmit (1-10 times)

Indicates the number of times the port attempts to re- authenticate a timed out session.

Define the

IP Address, Protocol, Key, Port, Timeout

, and

Retransmit

fields.