Filter
Top Products
DGS-3100 Series Gigabit Stackable Managed Switch CLI Manual
19
1
config authen server_host
Purpose To configure a user-defined authentication server host.
Syntax
config authen server_host <ipaddr> protocol [tacacs+ | radius]
{port <int 1-65535> | key [<key_string 128> | none] | timeout <int
1-30> | retransmit <int 1-10>}
Description The config authen server_host command configures a user-
defined authentication server host for the TACACS+/RADIUS
security protocols on the Switch. When a user attempts to access
the Switch with the authentication protocol enabled, the Switch
sends authentication packets to a remote TACACS+/RADIUS server
host on a remote host. The TACACS+/RADIUS server host then
verifies or denies the request and returns the appropriate message
to the Switch. More than one authentication protocol can be run on
the same physical server host but, remember that
TACACS+/RADIUS are separate entities and are not compatible
with each other. The maximum supported number of server hosts is
16.
Parameters server_host <ipaddr> – The IP address of the remote server host the
user wishes to alter.
protocol – The protocol used by the server host. The options are:
tacacs+ – Specifies that the server host utilizes the
TACACS+ protocol.
radius – Specifies that the server host utilizes the RADIUS
protocol.
port <int 1-65535> – The virtual port number of the authentication
protocol on a server host. The value must be between 1 and 65535.
The default port number is 49 for TACACS/TACACS+ servers and
1812 and 1813 for RADIUS servers but the user may set a unique
port number for higher security.
key [<key_string 128> | none] – The authentication key to be shared
with a configured TACACS+ or RADIUS server only. The value is a
string of up to 128 alphanumeric characters, or none.
timeout <int 1-30> – The time in seconds the Switch waits for the
server host to reply to an authentication request. The default value is
5 seconds.
retransmit <int 1-10> – The number of times the device resends an
authentication request when the server does not respond. The value
is between 1 and 10. This field is inoperable for the TACACS+
protocol.
Restrictions Only Administrator or operator-level users can issue this command.
Example usage:
To configure a TACACS+ authentication server host, with port number 4321, a timeout value of 12 seconds and a
retransmit count of 4.
DGS3100# config authen server_host 10.1.1.121 protocol tacacs+ port 4321
timeout 12 retransmit 4
Success.
DGS3100#