Filter
Top Products
xStack DGS/DXS-3300 Series Layer 3 Stackable Gigabit Ethernet Switch CLI Manual
167
DGS-3324SRi:4#create authen server_host 10.1.1.121 protocol tacacs+ port
1234 timeout 10 retransmit 5
Command: create authen server_host 10.1.1.121 protocol tacacs+ port 1234
timeout 10 retransmit 5
Success.
DGS-3324SRi:4#
config authen server_host
Purpose Used to configure a user-defined authentication server host.
Syntax
config authen server_host <ipaddr> protocol [tacacs | xtacacs
| tacacs+ | radius] {port <int 1-65535> | key [<key_string 254> |
none] | timeout <int 1-255> | retransmit < 1-255>}
This command will configure a user-defined authentication server
host for the TACACS/XTACACS/TACACS+ and RADIUS security
protocols on the Switch. When a user attempts to access the
Switch with authentication protocol enabled, the Switch will send
authentication packets to a remote
TACACS/XTACACS/TACACS+/RADIUS server host on a remote
host. The TACACS/XTACACS/TACACS+/RADIUS server host will
then verify or deny the request and return the appropriate message
to the Switch. More than one authentication protocol can be run on
the same physical server host but, remember that
TACACS/XTACACS/TACACS+ are separate entities and are not
compatible with each other. The maximum supported number of
server hosts is 16.
Description
Parameters
server_host <ipaddr> - The IP address of the remote server host to
be altered.
protocol – The protocol used by the server host. The user may
choose one of the following:
tacacs – Enter this parameter if the server host utilizes the
TACACS protocol.
xtacacs - Enter this parameter if the server host utilizes the
XTACACS protocol.
tacacs+ - Enter this parameter if the server host utilizes
the TACACS+ protocol.
radius - Enter this parameter if the server host utilizes the
RADIUS protocol.
port <int 1-65535> - Enter a number between 1 and 65535 to define
the virtual port number of the authentication protocol on a server
host. The default port number is 49 for
TACACS/XTACACS/TACACS+ servers but the user may set a
unique port number for higher security. The default port number for
RADIUS servers is 1812.
key <key_string 254> - Authentication key to be shared with a
configured TACACS+ server only. Specify an alphanumeric string
up to 254 characters or choose none.