D-Link DGS-3700-12G [180/338] Config authen server_host

DGS-3312SR Layer 3 Gigabit Switch

174

create authen server_host

 radius - Enter this parameter if the server host utilizes the

RADIUS protocol.

port <int 1-65535> - Enter a number between 1 and 65535 to

define the virtual port number of the authentication protocol on a

server host. The default port number is 49 for

TACACS/XTACACS/TACACS+ servers but the user may set a

unique port number for higher security. The default port number of

the authentication protocol on the RADIUS server is 1812

key <key_string 254> - Authentication key to be shared with a

configured TACACS+ server only. Specify an alphanumeric string

up to 254 characters.

timeout <int 1-255> - Enter the time in seconds the switch will wait

for the server host to reply to an authentication request. The default

value is 5 seconds.

retransmit <int 1-255> - Enter the value in the retransmit field to

change how many times the device will resend an authentication

request when the TACACS/XTACACS/TACACS+ or RADIUS

server does not respond.

Restrictions Only administrator-level users can issue this command.

Example usage:

To create a TACACS+ authentication server host, with port number 1234, a timeout value of 10 seconds and a

retransmit count of 5.

DGS-3312SR:4#create authen server_host 10.1.1.121 protocol tacacs+ port

1234 timeout 10 retransmit 5

Command: create authen server_host 10.1.1.121 protocol tacacs+ port 1234

timeout 10 retransmit 5

Success.

DGS-3312SR:4#

config authen server_host

Purpose Used to configure a user-defined authentication server host.

Syntax

config authen server_host <ipaddr> protocol [tacacs | xtacacs

| tacacs+] {port <int 1-65535> | key [<key_string 254> | none] |

timeout <int 1-255> | retransmit < 1-255>}

Description This command will configure a user-defined authentication server

host for the TACACS/XTACACS/TACACS+/RADIUS security

protocols on the switch. When a user attempts to access the switch

with authentication protocol enabled, the switch will send

authentication packets to a remote

TACACS/XTACACS/TACACS+/RADIUS server host on a remote