xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
68
DGS-3627:admin# create authen server_host 10.1.1.222 protocol tacacs+ port 15555 timeout
10
Command: create authen server_host 10.1.1.222 protocol tacacs+ port 15555 timeout 10
Success.
config authen server_host
Purpose This command is used to configure an authentication server host.
Syntax
config authen server_host <ipaddr> protocol [tacacs | xtacacs | tacacs+ | radius] { port
<int 1-65535> | key [<key_string 254> | none ] | timeout <int 1-255> | retransmit <int 1-
20> }
Description Configures an authentication server host.
Parameters
server_host - Specify the server host’s IP address.
protocol tacacs - Specify that the server host’s authentication protocol will be TACACS.
protocol xtacacs - Specify that the server host’s authentication protocol will be XTACACS.
protocol tacacs+ - Specify that the server host’s authentication protocol will be TACACS+.
protocol radius - Specify that the server host’s authentication protocol will be RADIUS.
port - The port number of the authentication protocol for the server host. Default value for
TACACS/XTACACS/TACACS+ is 49. Default value for RADIUS is 1812.
key - The key for TACACS+ and RADIUS authentication. If the value is null, no encryption
will apply. This value is meaningless for TACACS and XTACACS.
none - No encryption for TACACS+ and RADIUS authentication. This value is meaningless
for TACACS and XTACACS.
timeout - The time in seconds for waiting for the server reply. Default value is 5 seconds.
retransmit - The count for re-transmissions. This value is meaningless for TACACS+. Default
value is 2.
Restrictions Only Administrator level users can issue this command.
Example usage:
To configure the TACACS+ authentication server host with an IP address of 10.1.1.222 to have the key value “This is a
secret”:
DGS-3627:admin# config authen server_host 10.1.1.222 protocol tacacs+ key "This is a
secret"
Command: config authen server_host 10.1.1.222 protocol tacacs+ key "This is a se
cret"
Success.
delete authen server_host
Purpose This command is used to delete an authentication server host.
Syntax
delete authen server_host <ipaddr> protocol [tacacs | xtacacs | tacacs+ | radius]
Description Deletes an authentication server host.
Parameters
server_host - Specify the server host’s IP address.
protocol tacacs - Specify that the server host’s authentication protocol is TACACS.
