Create Authen Server_Host - D-Link DGS-3100 Series Cli Manual

DGS-3100 Gigabit Ethernet Switch Manual

create authen server_host

Purpose
Syntax
Description
Parameters
Restrictions
Example usage:
To create a TACACS+ authentication server host, with port number 1234, a timeout value of 10 seconds and a
retransmit count of 5.
DGS3100# create authen server_host 10.1.1.121 protocol tacacs+ port 1234
timeout 10 retransmit 5
Success.
DGS3100#
To create an authentication server host.
create authen server_host <ipaddr> protocol [tacacs+ | radius]
{port <int 1-65535> | key [<key_string 128> | none] | timeout <int
1-30> | retransmit <int 1-10>}
The create authen server_host command creates an
authentication server host for the TACACS+/RADIUS security
protocols on the Switch. When a user attempts to access the Switch
with authentication protocol enabled, the Switch sends
authentication packets to a remote TACACS+/RADIUS server host
on a remote host. The TACACS+/RADIUS server host then verifies
or denies the request and returns the appropriate message to the
Switch. More than one authentication protocol can be run on the
same physical server host but, remember that TACACS+/RADIUS
are separate entities and are not compatible with each other. The
maximum supported number of server hosts is 16.
server_host <ipaddr> – The IP address of the remote server host to
add.
protocol – The protocol used by the server host. The options are:
•
tacacs+ – Specifies that the server host utilizes the
TACACS+ protocol.
•
radius – Specifies that the server host utilizes the RADIUS
protocol.
port <int 1-65535> – The virtual port number of the authentication
protocol on a server host. The value must be between 1 and 65535.
The default port number is 49 for TACACS/XTACACS/TACACS+
servers and 1812 and 1813 for RADIUS servers but the user may
set a unique port number for higher security.
key [<key_string 128> | none] – The authentication key to be shared
with a configured TACACS+ or RADIUS server only. The value is a
string of up to 128 alphanumeric characters, or none.
timeout <int 1-30> – The time in seconds the Switch will wait for the
server host to reply to an authentication request. The default value is
5 seconds.
retransmit <int 1-10> – The number of times the device will resend
an authentication request when the server does not respond. The
value is between 1 and 10. This field is inoperable for the TACACS+
protocol.
Only administrator-level users can issue this command.
150