D-Link 3324SRi Reference Manual - Page 183

xStack Gigabit Layer 3 Switch Command Line Interface Manual

DGS-3324SRi:4#create authen server_host 10.1.1.121 protocol tacacs+ port

1234 timeout 10 retransmit 5

Command: create authen server_host 10.1.1.121 protocol tacacs+ port 1234

timeout 10 retransmit 5

Success.

DGS-3324SRi:4#

config authen server_host

Purpose

Used to configure a user-defined authentication server host.

Syntax

config authen server_host <ipaddr> protocol [tacacs | xtacacs

| tacacs+ | radius] {port <int 1-65535> | key [<key_string 254> |

none] | timeout <int 1-255> | retransmit < 1-255>}

Description

This command will configure a user-defined authentication server

host for the TACACS/XTACACS/TACACS+ and RADIUS security

protocols on the Switch. When a user attempts to access the

Switch with authentication protocol enabled, the Switch will send

authentication packets to a remote

TACACS/XTACACS/TACACS+/RADIUS server host on a remote

host. The TACACS/XTACACS/TACACS+/RADIUS server host will

then verify or deny the request and return the appropriate message

to the Switch. More than one authentication protocol can be run on

the same physical server host but, remember that

TACACS/XTACACS/TACACS+ are separate entities and are not

compatible with each other. The maximum supported number of

server hosts is 16.

Parameters

server_host <ipaddr>

- The IP address of the remote server host to

be altered.

protocol

– The protocol used by the server host. The user may

choose one of the following:

port <int 1-65535>

- Enter a number between 1 and 65535 to define

the virtual port number of the authentication protocol on a server

host. The default port number is 49 for

TACACS/XTACACS/TACACS+ servers but the user may set a

unique port number for higher security. The default port number for

RADIUS servers is 1812.

key <key_string 254>

-

Authentication key to be shared with a

configured TACACS+ server only. Specify an alphanumeric string

up to 254 characters or choose none.

timeout <int 1-255>

- Enter the time in seconds the Switch will wait

±

tacacs

– Enter this parameter if the server host utilizes the

TACACS protocol.

±

xtacacs

- Enter this parameter if the server host utilizes the

XTACACS protocol.

±

tacacs+

- Enter this parameter if the server host utilizes

the TACACS+ protocol.

±

radius

- Enter this parameter if the server host utilizes the

RADIUS protocol.

175

Section	Page
Introduction	9
	9
	9
Accessing the Switch via the Serial Port	9
Setting the Switch’s IP Address	10
Using the Console CLI	12
	12
	12
Connecting to the Switch	12
Command Syntax	17
Basic Switch Commands	19
Switch Port Commands	34
Port Security Commands	37
Network Management (SNMP) Commands	40
Switch Utility Commands	62
Network Monitoring Commands	68
Multiple Spanning Tree Protocol (MSTP) Commands	85
Forwarding Database Commands	99
Broadcast Storm Control Commands	109
QoS Commands	111
Port Mirroring Commands	124
VLAN Commands	128
Link Aggregation Commands	138
IP Commands (Including IP Multinetting)	144
IGMP Commands (Including IGMP v3)	149
IGMP Snooping Commands	153
MAC Notification Commands	163
Access Authentication Control Commands	168
SSH Commands	193
SSL Commands	201
802.1X Commands	207
Access Control List (ACL) Commands	226
Traffic Segmentation Commands	244
Stacking Commands	247
D-Link Single IP Management Commands	251
Time and SNTP Commands	262
ARP Commands	269
VRRP Commands	273
Routing Table Commands	281
Route Redistribution Commands	285
BOOTP Relay Commands	292
DNS Relay Commands	296
RIP Commands	300
DVMRP Commands	303
PIM Commands	308
IP Multicasting Commands	312
MD5 Configuration Commands	314
OSPF Configuration Commands	317
Route Preference Commands	338
Jumbo Frame Commands	342
File System Commands	344
Command History List	352

D-Link 3324SRi Reference Manual - Page 183

config authen server_host, host. The TACACS/XTACACS/TACACS+/RADIUS server host will

Page 183 highlights