Home
Главная
D-Link
Коммутатор
DGS-1210-28XS/ME
Руководство пользователя _CLI_ Страница: 464

D-Link DGS-1210-28XS/ME [464/519] Config authen server_host

D-Link DGS-1210-52/ME rev.B [464/519] Config authen server_host

DGS-1210 Metro Ethernet Managed Switch CLI Reference Guide

446

encryption_key <string 800> - Specifies the encryption key.

key [<string 254> | none] – The authentication key to be shared with

a configured TACACS+ or RADIUS server only. The value is a string

of up to 254 alphanumeric characters, or none.

timeout <int 1-255> – The time in seconds the Switch waits for the

server host to reply to an authentication request. The default value is

5 seconds.

retransmit <int 1-255> – The number of times the device resends an

authentication request when the server does not respond. The value

is between 1 and 255. This field is inoperable for the TACACS+

protocol.

Restrictions Only Administrator-level users can issue this command.

Example usage:

To create a TACACS+ authentication server host, with port number 1234, a timeout value of 10 seconds

and a retransmit count of 5.

DGS-1210-28MP/ME:5# create authen server_host 10.1.1.121 protocol tacacs+

port 1234 timeout 10 retransmit 5

Command: create authen server_host 10.1.1.121 protocol tacacs+ port 1234

timeout 10 retransmit 5

Key is empty for TACACS+ or RADIUS.

Retransmit is meaningless for TACACS+.

Success.

DGS-1210-28MP/ME:5#

config authen server_host

Purpose To configure a user-defined authentication server host.

Syntax

config authen server_host [<ipaddr> | ipv6address <ipv6addr>]

protocol [tacacs+ | radius] {acct_port <int 1-65535> | port <int 1-

65535> | encryption_key <string 800> | key [<string 254> | none]

| timeout <int 1-255> | retransmit <int 1-255>}

Description

The config authen server_host command configures a user-

defined authentication server host for the TACACS+/RADIUS

security protocols on the Switch. When a user attempts to access

the Switch with the authentication protocol enabled, the Switch

sends authentication packets to a remote TACACS+/RADIUS server

host on a remote host. The TACACS+/RADIUS server host then

verifies or denies the request and returns the appropriate message

to the Switch. More than one authentication protocol can be run on

the same physical server host but, remember that

TACACS+/RADIUS are separate entities and are not compatible

with each other. The maximum supported number of server hosts is

16.

Parameters

[<ipaddr> | ipv6address <ipv6addr>] – The IPv4 or IPv6 address of

the remote server host the user wishes to alter.

protocol – The protocol used by the server host. The options are:

• tacacs+ – Specifies that the server host utilizes the

TACACS+ protocol.

D-Link DGS-1210-28XS/ME [464/519] Config authen server_host

Содержание

Похожие устройства