D-Link DGS-1210-52/ME rev.B [467/519] Config authen server_group

DGS-1210/ME Metro Ethernet Switch CLI Reference Guide

449

DGS-1210-28MP/ME:5# show authen server_host

Command: show authen server_host

IP Address Protocol Port Timeout Retransmit Key

--------------- -------------- ------ ------------ ----- ---------- --------------------

10.1.1.121 tacacs+ 4321 ------ -1

Total Entries : 1

DGS-1210-28MP/ME:5#

create authen server_group

Purpose To create an authentication server host.

Syntax

create authen server_group <string 15>

Description

The create authen server_ group command creates an

authentication server group for the protocols on the Switch.

Parameters

<string 15> – Defines the authentication group name as a string of

up to 15 alphanumeric characters.

Restrictions Only Administrator-level users can issue this command.

Example usage:

To create a server group “dlinkgroup”:

DGS-1210-28MP/ME:5# create authen server_group dlinkgroup

Command: create authen server_group dlinkgroup

Success.

DGS-1210-28MP/ME:5#

config authen server_group

Purpose To configure a user-defined authentication server host.

Syntax

config authen server_group [<string 15> | radius | tacacs+] [add

| delete] server_host [<ipaddr> | ipv6address <ipv6addr>]

protocol [radius | tacacs+]

Description

The config authen server_ group command configures a user-

defined authentication server group for the TACACS+/RADIUS

security protocols on the Switch. When a user attempts to access

the Switch with the authentication protocol enabled, the Switch

sends authentication packets to a remote TACACS+/RADIUS server

group on a remote host. The TACACS+/RADIUS server group then

verifies or denies the request and returns the appropriate message

to the Switch. More than one authentication protocol can be run on

the same physical server host but, remember that

TACACS+/RADIUS are separate entities and are not compatible