DES-1210-28/ME Metro Ethernet Managed Switch CLI Reference Guide
267
DES-1210-28/ME:5# create authen server_group dlinkgroup
Command: create authen server_group dlinkgroup
Success.
DES-1210-28/ME:5#
config authen server_group
Purpose To configure a user-defined authentication server host.
Syntax
config authen server_group [<string 15> | radius | tacacs+] [add
| delete] server_host <ipaddr> protocol [radius | tacacs+]
Description
The config authen server_ group command configures a user-
defined authentication server group for the TACACS+/RADIUS
security protocols on the Switch. When a user attempts to access
the Switch with the authentication protocol enabled, the Switch
sends authentication packets to a remote TACACS+/RADIUS server
group on a remote host. The TACACS+/RADIUS server group then
verifies or denies the request and returns the appropriate message
to the Switch. More than one authentication protocol can be run on
the same physical server host but, remember that
TACACS+/RADIUS are separate entities and are not compatible
with each other. The maximum supported number of server group is
16.
Parameters
<string 15> – Defines the authentication group name as a string of
up to 15 alphanumeric characters.
server_host <ipaddr> – The IP address of the remote server group
the user wishes to alter.
[add | delete] –Specifies the authentication server host will be add or
deleted of the server group.
protocol – The protocol used by the server host. The options are:
• tacacs+ – Specifies that the server host utilizes the
TACACS+ protocol.
• radius – Specifies that the server host utilizes the RADIUS
protocol.
Restrictions Only Administrator or operator-level users can issue this command.
Example usage:
To configure a RADIUS authentication server group:
DES-1210-28/ME:5# config authen server_group dlinkgroup add server_host
10.1.1.121 protocol radius
Command: config authen server_group dlinkgroup add server_host 10.1.1.121
protocol radius
Success.
DES-1210-28/ME:5#