H3C Technologies H3C S7500E Series Switches - Manual (Page 42)

2-13
By default, the device sets the status of each RADIUS server configured with an IP address to active.
You can manually change the status of a server as needed. For example, to use the secondary server
for authentication, you need to change the status of the primary server to block while leaving the
secondary server in active state.
Follow these steps to set the status of RADIUS servers:
To do… Use the command… Remarks
Enter system view system-view —
Enter RADIUS scheme view
radius scheme
radius-scheme-name
—
Set the status of the primary RADIUS
authentication/authorization server
state primary authentication
{ active | block }
Set the status of the primary RADIUS
accounting server
state primary accounting { active |
block }
Set the status of the secondary
RADIUS authentication/authorization
server
state secondary authentication
{ active | block }
Set the status of the secondary
RADIUS accounting server
state secondary accounting
{ active | block }
Optional
active for every server
specified in the RADIUS
scheme by default
z The server status set by the state command cannot be saved in the configuration file and will be
restored to active every time the server restarts.
z To display the states of the servers, use the display radius scheme command.
Configuring attributes for data to be sent to the RADIUS servers
Follow these steps to configure the attributes to be used for data that is to be sent to the RADIUS
servers:
To do… Use the command… Remarks
Enter system view system-view —
Enter RADIUS scheme view
radius scheme
radius-scheme-name
—
Specify the format of the
username to be sent to a RADIUS
server
user-name-format
{ keep-original | with-domain |
without-domain }
Optional
By default, the ISP domain name
is included in the username.