Filter
Top Products
xStack® DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Guide
260
config authen server_host
Syntax
config authen server_host <ipaddr> protocol [tacacs | xtacacs |
tacacs+ | radius] {port <int 1-65535> | key [<key_string 254> |
none] | timeout <int 1-255> | retransmit < 1-255>} (1)
Description
This command is used to configure a user-defined authentication
server host for the TACACS/XTACACS/TACACS+/RADIUS
security protocols on the Switch. When a user attempts to access
the Switch with the authentication protocol enabled, the Switch will
send authentication packets to a remote
TACACS/XTACACS/TACACS+/RADIUS server host on a remote
host. The TACACS/XTACACS/TACACS+/RADIUS server host will
then verify or deny the request and return the appropriate message
to the Switch. More than one authentication protocol can be run on
the same physical server host but, remember that
TACACS/XTACACS/TACACS+/RADIUS are separate entities and
are not compatible with each other. The maximum supported
number of server hosts is 16.
Parameters
server_host <ipaddr> − The IP address of the remote server host
the user wishes to alter.
protocol – The protocol used by the server host. The user may
choose one of the following:
tacacs – Enter this parameter if the server host utilizes the
TACACS protocol.
xtacacs − Enter this parameter if the server host utilizes the
XTACACS protocol.
tacacs+ − Enter this parameter if the server host utilizes the
TACACS+ protocol.
radius − Enter this parameter if the server host utilizes the RADIUS
protocol.
port <int 1-65535> − Enter a number between 1 and 65535 to
define the virtual port number of the authentication protocol on a
server host. The default port number is 49 for
TACACS/XTACACS/TACACS+ servers and 1812 and 1813 for
RADIUS servers but the user may set a unique port number for
higher security.
key <key_string 254> − Authentication key to be shared with a
configured TACACS+ or RADIUS server only. Specify an
alphanumeric string up to 254 characters or choose none.
timeout <int 1-255> − Enter the time in seconds the Switch will wait
for the server host to reply to an authentication request. The default
value is 5 seconds.
retransmit <int 1-255> − Enter the value in the retransmit field to
change how many times the device will resend an authentication
request when the server does not respond. This field is inoperable
for the TACACS+ protocol.
Restrictions
Only Administrator-level users can issue this command.
Example usage:
To configure a TACACS+ authentication server host, with port number 4321, a timeout value of 12 seconds and a retransmit
count of 4.