Filter
Top Products
DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual
config authen server_host
TACACS/XTACACS/TACACS+/RADIUS server host on a remote
host. The TACACS/XTACACS/TACACS+/RADIUS server host will
then verify or deny the request and return the appropriate message
to the Switch. More than one authentication protocol can be run on
the same physical server host but, remember that
TACACS/XTACACS/TACACS+/RADIUS are separate entities and
are not compatible with each other. The maximum supported
number of server hosts is 16.
Parameters server_host <ipaddr> - The IP address of the remote server host
the user wishes to alter.
protocol – The protocol used by the server host. The user may
choose one of the following:
port <int 1-65535> - Enter a number between 1 and 65535 to
define the virtual port number of the authentication protocol on a
server host. The default port number is 49 for
TACACS/XTACACS/TACACS+ servers and 1812 and 1813 for
RADIUS servers but the user may set a unique port number for
higher security.
key <key_string 254> - Authentication key to be shared with a
configured TACACS+ or RADIUS server only. Specify an
alphanumeric string up to 254 characters or choose none.
timeout <int 1-255> - Enter the time in seconds the Switch will wait
for the server host to reply to an authentication request. The default
value is 5 seconds.
retransmit <int 1-255> - Enter the value in the retransmit field to
change how many times the device will resend an authentication
request when the server does not respond. This field is inoperable
for the TACACS+ protocol.
Restrictions Only administrator-level users can issue this command.
tacacs – Enter this parameter if the server host utilizes the
TACACS protocol.
xtacacs - Enter this parameter if the server host utilizes
the XTACACS protocol.
tacacs+ - Enter this parameter if the server host utilizes
the TACACS+ protocol.
radius - Enter this parameter if the server host utilizes the
RADIUS protocol.
Example usage:
To configure a TACACS+ authentication server host, with port number 4321, a timeout value of 12 seconds and a
retransmit count of 4.
DES-3028P:4#config authen server_host 10.1.1.121 protocol tacacs+
port 4321 timeout 12 retransmit 4
Command: config authen server_host 10.1.1.121 protocol tacacs+ port
4321 timeout 12 retransmit 4
Success.
DES-3028P:4#
delete authen server_host
Purpose Used to delete a user-defined authentication server host.
Syntax
delete authen server_host <ipaddr> protocol [tacacs | xtacacs |
tacacs+ | radius]
198