User`s guide

151
config authen server_host
Purpose To configure a user-defined authentication server host.
Syntax
config authen server_host <ipaddr> protocol [tacacs+ | radius]
{port <int 1-65535> | key [<key_string 128> | none] | timeout <int
1-30> | retransmit <int 1-10>}
Description The config authen server_host command configures a user-
defined authentication server host for the TACACS+/RADIUS
security protocols on the Switch. When a user attempts to access
the Switch with the authentication protocol enabled, the Switch will
send authentication packets to a remote TACACS+/RADIUS server
host on a remote host. The TACACS+/RADIUS server host will then
verify or deny the request and return the appropriate message to the
Switch. More than one authentication protocol can be run on the
same physical server host but, remember that TACACS+/RADIUS
are separate entities and are not compatible with each other. The
maximum supported number of server hosts is 16.
Parameters server_host <ipaddr> – The IP address of the remote server host the
user wishes to alter.
protocol – The protocol used by the server host. The options are:
• tacacs+ – Specifies that the server host utilizes the
TACACS+ protocol.
• radius – Specifies that the server host utilizes the RADIUS
protocol.
port <int 1-65535> – The virtual port number of the authentication
protocol on a server host. The value must be between 1 and 65535.
The default port number is 49 for TACACS/XTACACS/TACACS+
servers and 1812 and 1813 for RADIUS servers but the user may
set a unique port number for higher security.
key [<key_string 128> | none] – The authentication key to be shared
with a configured TACACS+ or RADIUS server only. The value is a
string of up to 128 alphanumeric characters, or none.
timeout <int 1-30> – The time in seconds the Switch will wait for the
server host to reply to an authentication request. The default value is
5 seconds.
retransmit <int 1-10> – The number of times the device will resend
an authentication request when the server does not respond. The
value is between 1 and 10. This field is inoperable for the TACACS+
protocol.
Restrictions Only administrator-level users can issue this command.
Example usa
To configure a TACACS+ authentication server host, with port number 4321, a timeout value of 12 seconds and a
retransmit count of 4.
DGS3100# config authen server_host 10.1.1.121 protocol tacacs+ port 4321
timeout 12 retransmit 4
Success.
DGS3100#
ge: