Filter
Top Products
DGS-3100 Series Gigabit Stackable Managed Switch CLI Manual
19
0
create authen server_host
Purpose To create an authentication server host.
Syntax
create authen server_host <ipaddr> protocol tacacs+ {port <int
1-65535> | key [<key_string 128> | none] | timeout <int 1-30>}
priority [first | second | third}
Description The create authen server_host command creates an
authentication server host for the TACACS+/RADIUS security
protocols on the Switch. When a user attempts to access the Switch
with authentication protocol enabled, the Switch sends
authentication packets to a remote TACACS+/RADIUS server host
on a remote host. The TACACS+/RADIUS server host then verifies
or denies the request and returns the appropriate message to the
Switch. More than one authentication protocol can be run on the
same physical server host but, remember that TACACS+/RADIUS
are separate entities and are not compatible with each other. The
maximum supported number of server hosts is 16.
Parameters server_host <ipaddr> – The IP address of the remote server host to
add.
protocol – The protocol used by the server host. The options are:
tacacs+ – Specifies that the server host utilizes the
TACACS+ protocol.
radius – Specifies that the server host utilizes the RADIUS
protocol.
port <int 1-65535> – The virtual port number of the authentication
protocol on a server host. The value must be between 1 and 65535.
The default port number is 49 for TACACS/TACACS+ servers and
1812 and 1813 for RADIUS servers but the user may set a unique
port number for higher security.
key [<key_string 128> | none] – The authentication key to be shared
with a configured TACACS+ or RADIUS server only. The value is a
string of up to 128 alphanumeric characters, or none.
timeout <int 1-30> – The time in seconds the Switch waits for the
server host to reply to an authentication request. The default value is
5 seconds.
retransmit <int 1-10> – The number of times the device resends an
authentication request when the server does not respond. The value
is between 1 and 10. This field is inoperable for the TACACS+
protocol.
Restrictions Only Administrator or operator-level users can issue this command.
Example usage:
To create a TACACS+ authentication server host, with port number 1234, a timeout value of 10 seconds and a
retransmit count of 5.
DGS3100# create authen server_host 10.1.1.121 protocol tacacs+ port 1234
timeout 10 retransmit 5
Success.
DGS3100#