D-Link 3312SR Reference Manual - Page 157

DGS-3312SR Layer 3 Gigabit Switch

151

create authen server_host

Syntax

create authen server_host <ipaddr> protocol [tacacs | xtacacs

| tacacs+ | radius] {port <int 1-65535> | key [<key_string 254> |

none] | timeout <int 1-255> | retransmit <1-255>}

Description

This command will create an authentication server host for the

TACACS/XTACACS/TACACS+/RADIUS security protocols on the

switch. When a user attempts to access the switch with

authentication protocol enabled, the switch will send authentication

packets to a remote TACACS/XTACACS/TACACS+/RADIUS

server host on a remote host. The

TACACS/XTACACS/TACACS+/RADIUS server host will then verify

or deny the request and return the appropriate

message to the

switch. More than one authentication protocol can be run on the

same physical server host but, remember that

TACACS/XTACACS/TACACS+/RADIUS are separate entities and

are not compatible with each other. The maximum supported

number of server hosts is 16.

Parameters

server_host <ipaddr>

- The IP address of the remote server host

the user wishes to add.

protocol

– The protocol used by the server host. The user may

choose one of the following:

±

tacacs

– Enter this parameter if the server host utilizes the

TACACS protocol.

±

xtacacs

- Enter this parameter if the server host utilizes the

XTACACS protocol.

±

tacacs+

- Enter this parameter if the server host utilizes

the TACACS+ protocol.

±

radius

- Enter this parameter if the server host utilizes the

RADIUS protocol.

port <int 1-65535>

-

Enter a number between 1 and 65535 to

define the virtual port number of the authentication protocol on a

server host. The default port number is 49 for

TACACS/XTACACS/TACACS+ servers but the user may set a

unique port number for higher security. The default port number of

the authentication protocol on the RADIUS server is 1812

key <key_string 254>

-

Authentication key to be shared with a

configured TACACS+ server only. Specify an alphanumeric string

up to 254 characters.

timeout <int 1-255>

- Enter the time in seconds the switch will wait

for the server host to reply to an authentication request. The default

value is 5 seconds.

retransmit <int 1-255>

- Enter the value in the retransmit field to

change how many times the device will resend an authentication

request when the TACACS/XTACACS/TACACS+ or RADIUS

server does not respond.

Restrictions

Only administrator-level users can issue this command.

Example usage:

Section	Page
Introduction	7
	7
	7
Accessing the Switch via the Serial Port	7
Setting the Switch’s IP Address	8
Using the Console CLI	10
	10
	10
Connecting to the Switch	10
Command Syntax	16
Basic Switch Commands	18
Switch Port Commands	30
Port Security Commands	33
Network Management (SNMP) Commands	37
Switch Utility Commands	58
Network Monitoring Commands	62
Multiple Spanning Tree Protocol (MSTP) Commands	75
Forwarding Database Commands	88
Broadcast Storm Control Commands	95
QoS Commands	97
Port Mirroring Commands	105
VLAN Commands	110
Link Aggregation Commands	117
IP Commands (Including IP Multinetting)	123
IGMP Commands	128
IGMP Snooping Commands	131
MAC Notification Commands	139
Access Authentication Control Commands	143
SSH Commands	167
SSL Commands	175
802.1X Commands	180
Access Control List (ACL) Commands	192
Traffic Segmentation Commands	201
Stacking Commands	203
D-Link Single IP Management Commands	206
Time and SNTP Commands	216
ARP Commands	222
VRRP Commands	226
Routing Table Commands	233
Route Redistribution Commands	237
BOOTP Relay Commands	243
DNS Relay Commands	247
RIP Commands	251
DVMRP Commands	254
PIM Commands	259
IP Multicasting Commands	263
MD5 Configuration Commands	265
OSPF Configuration Commands	268
Command History List	288
Technical Specifications	290
	296
	296
	296
	296
	296
	296
	296
Copyright Statement: No part of this publication or documentation accompanying this product may be reproduced in any form or by any means or used to make any derivative such as translation, transformation, or adaptation without permission from D-Link Co	296

D-Link 3312SR Reference Manual - Page 157

create authen server_host, none] | timeout <int 1-255> | retransmit <1-255>}

Page 157 highlights