H3C Technologies H3C S7500E Series Switches User Manual
Page 38
2-9
To do…
Use the command…
Remarks
Specify the primary RADIUS
authentication/authorization
server
primary authentication { ip-address | ipv6
ipv6-address } [ port-number ]
Specify the secondary
RADIUS
authentication/authorization
server
secondary authentication { ip-address | ipv6
ipv6-address } [ port-number ]
Required
Configure at least one
command.
No
authentication/authorizati
on server is specified by
default.
z
If both the primary and secondary authentication/authorization servers are specified, the
secondary one is used when the primary one is not reachable.
z
It is recommended to specify only the primary RADIUS authentication/authorization server if
backup is not required.
z
In practice, you may specify two RADIUS servers as the primary and secondary
authentication/authorization servers respectively. At one time, a server can be the primary
authentication/authorization server for a scheme and the secondary authentication/authorization
servers for another scheme.
z
The IP addresses of the primary and secondary authentication/authorization servers for a scheme
cannot be the same. Otherwise, the configuration fails.
z
All servers for authentication/authorization and accountings, primary or secondary, must use IP
addresses of the same IP version.
Specifying the RADIUS accounting servers and relevant parameters
Follow these steps to specify the RADIUS accounting servers and perform related configurations:
To do…
Use the command…
Remarks
Enter system view
system-view
—
Enter RADIUS scheme view
radius scheme radius-scheme-name
—
Specify the primary RADIUS
accounting server
primary accounting { ip-address | ipv6
ipv6-address } [ port-number ]
Specify the secondary RADIUS
accounting server
secondary accounting { ip-address | ipv6
ipv6-address } [ port-number ]
Required
Configure at least one
command.
No accounting server is
specified by default.
Enable the device to buffer
stop-accounting requests to
which no responses are
received
stop-accounting-buffer enable
Optional
Enabled by default