D-Link DGS-1100-06/ME, Справочное руководство CLI

Страница: 236 / 275

DGS-1100-06/ME Metro Ethernet Managed Switch CLI Reference Guide
224
authentication protocol enabled, the Switch sends authentication
packets to a remote RADIUS server host on a remote host. The
RADIUS server host then verifies or denies the request and returns
the appropriate message to the Switch. More than one
authentication protocol can be run on the same physical server host
but, remember that RADIUS is separate entities and are not
compatible with each other. The maximum supported number of
server hosts is 16.
Parameters <ipaddr>
– The IPv4 address of the remote server host to add.
ipv6address <ipv6addr>
–
The IPv6 address of the remote server
host to add.
protocol radius
– Specifies that the server host utilizes the RADIUS
protocol.
port <int 1-65535>
– The virtual port number of the authentication
protocol on a server host. The value must be between 1 and 65535.
The default port numbers are 1812 and 1813 for RADIUS servers
but the user may set a unique port number for higher security.
key [<string 254> | none]
– The authentication key to be shared with
a configured RADIUS server only. The value is a string of up to 254
alphanumeric characters, or
none .
timeout <int 1-255>
– The time in seconds the Switch waits for the
server host to reply to an authentication request. The default value is
5 seconds.
retransmit <int 1-255>
– The number of times the device resends an
authentication request when the server does not respond. The value
is between 1 and 255.
Restrictions Only Administrator or operator-level users can issue this command.
Example usage:
To create a RADIUS authentication server host, with port number 1234, a timeout value of 10 seconds and a
retransmit count of 5.
DGS-1100-06/ME:5# create authen server_host 10.1.1.121 protocol radius port
1234 timeout 10 retransmit 5
Command: create authen server_host 10.1.1.121 protocol radius port 1234
timeout10 retransmit 5
Key is empty for RADIUS.
Success.
DGS-1100-06/ME:5#
config authen server_host
Purpose To configure a user-defined authentication server host.
Syntax
config authen server_host [<ipaddr> | ipv6address <ipv6addr>]
protocol radius {port <int 1-65535> | key [<string 254> | none] |
timeout <int 1-255> | retransmit <int 1-255>}
Description The
config authen server_host
command configures a user-
defined authentication server host for the RADIUS security protocols
on the Switch. When a user attempts to access the Switch with the
authentication protocol enabled, the Switch sends authentication