D-Link DGS-3000 - Page 78

DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide
74
create authen server_host 5-22
Description
This command is used to create an authentication server host. When an authentication server host
is created, IP address and protocol are the index. That means over 1 authentication protocol
services can be run on the same physical host. The maximum supported number of server hosts is
16.
Format
create authen server_host [<ipaddr> | ipv6 <ipv6addr>] protocol [tacacs | xtacacs | tacacs+|
radius] {port <int 1-65535> | [key [<key_string 254> | none] | encryption_key <key_string
344>] | timeout <int 1-255> | retransmit <int 1-20>}
Parameters
<ipaddr> - Enter the server host IP address.
ipv6 - Specify the server host IPv6 address.
<ipv6addr> - Enter the server host IPv6 address.
protocol - Specify the host's authentication protocol.
tacacs - Server host’s authentication protocol.
xtacacs - Server host’s authentication protocol.
tacacs+ - Server host’s authentication protocol.
radius - Server host’s authentication protocol.
port - (Optional) The port number of authentication protocol for server host. Default value for
TACACS/XTACACS/TACACS+ is 49. Default value for RADIUS is 1812.
<int 1-65535> - Enter the authentication protocol port number here. This value must be
between 1 and 65535.
key - (Optional) The key for TACACS+ and RADIUS authentication. If the value is null, no
encryption will apply. This value is meaningless for TACACS and XTACACS.
<key_string 254> - Enter the TACACS+ or the RADIUS key here. This key can be up to 254
characters long.
none - No encryption for TACACS+ and RADIUS authentication. This value is meaningless
for TACACS and XTACACS.
encryption_key - (Optional) Specify the encrypted form key string for TACACS+ and RADIUS
authentication. This value is meaningless for TACACS and XTACACS. The encryption
algorithm is based on DES.
<key_string 344> - Enter the encrypted form key string for TACACS+ and RADIUS
authentication.
timeout - (Optional) The time in second for waiting server reply. Default value is 5 seconds.
<int 1-255> - Enter the timeout value here. This value must be between 1 and 255 seconds.
retransmit - (Optional) The count for re-transmit. This value is meaningless for TACACS+.
Default value is 2.
<int 1-20> - Enter the re-transmit value here. This value must be between 1 and 20.
Restrictions
Only Administrators can issue this command.
Example
To create a TACACS+ authentication server host, its listening port number is 15555 and timeout
value is 10 seconds: