D-Link DGS-6600-48TS Configuration Guide - Page 429

Volume 8-Security & Authentication / Chapter 39-Authentication, Authorization and Accounting (AAA) Configuration AAA Configuration Com- AAA Configuration Commands Configuring AAA Server Groups A server group may contain a list of server hosts, with each group having different protocol methods specified. A server group, referenced by a group name, will be used to define the authentication methods for login users and 802.1x users etc. To define a server group, the user should use the aaa group Server command and enter AAA group server configuration mode. The user can then enter the server command to create server hosts with the available protocol methods. The order that servers are created in will be the order that clients will use when attempting to authenticate on the network. Creating AAA Server Groups Enter the following command in global configuration mode to create a new AAA server group: Command aaa group server GROUP-NAME Explanation Creates a new AAA server group. In the following example, the user creates a new AAA server group called "group1": DGS-6600:2>enable DGS-6600:15#configure terminal DGS-6600:15(config)#aaa group server group1 DGS-6600:15(config-aaa-group-server)#end Displaying AAA Server Groups Enter the following command in privilege EXEC mode to display the AAA authentication groups: Command show aaa group server [GROUP-NAME] Explanation Creates a new AAA server group. In the following example, the user creates a new AAA server group called "group1": DGS-6600:2>enable DGS-6600:15#show aaa group server group1 Group Name IP Address Protocol Port Timeout Retransmit Key group1 172.19.10.31 TACACS 1200 30 2 DGS-6600:15# Defining AAA Server Hosts The user can define a server host with the TACACS, XTACACS, TACACS+, or RADIUS protocol methods. DGS-6600 Configuration Guide 429