D-Link xStack DGS-3324SRi Command Line Interface Reference Manual page 183

xStack Gigabit Layer 3 Switch Command Line Interface Manual
DGS-3324SRi:4#create authen server_host 10.1.1.121 protocol tacacs+ port
1234 timeout 10 retransmit 5
Command: create authen server_host 10.1.1.121 protocol tacacs+ port 1234
timeout 10 retransmit 5
Success.
DGS-3324SRi:4#
config authen server_host
Purpose Used to configure a user-defined authentication server host.
Syntax config authen server_host <ipaddr> protocol [tacacs | xtacacs
| tacacs+ | radius] {port <int 1-65535> | key [<key_string 254> |
none] | timeout <int 1-255> | retransmit < 1-255>}
Description This command will configure a user-defined authentication server
host for the TACACS/XTACACS/TACACS+ and RADIUS security
protocols on the Switch. When a user attempts to access the
Switch with authentication protocol enabled, the Switch will send
authentication packets to a remote
TACACS/XTACACS/TACACS+/RADIUS server host on a remote
host. The TACACS/XTACACS/TACACS+/RADIUS server host will
then verify or deny the request and return the appropriate message
to the Switch. More than one authentication protocol can be run on
the same physical server host but, remember that
TACACS/XTACACS/TACACS+ are separate entities and are not
compatible with each other. The maximum supported number of
server hosts is 16.
Parameters server_host <ipaddr> - The IP address of the remote server host to
be altered.
protocol – The protocol used by the server host. The user may
choose one of the following:
port <int 1-65535> - Enter a number between 1 and 65535 to define
the virtual port number of the authentication protocol on a server
host. The default port number is 49 for
TACACS/XTACACS/TACACS+ servers but the user may set a
unique port number for higher security. The default port number for
RADIUS servers is 1812.
key <key_string 254> - Authentication key to be shared with a
configured TACACS+ server only. Specify an alphanumeric string
up to 254 characters or choose none.
timeout <int 1-255> - Enter the time in seconds the Switch will wait
tacacs – Enter this parameter if the server host utilizes the
TACACS protocol.
xtacacs - Enter this parameter if the server host utilizes the
XTACACS protocol.
tacacs+ - Enter this parameter if the server host utilizes
the TACACS+ protocol.
radius - Enter this parameter if the server host utilizes the
RADIUS protocol.
175