beautypg.com

H3C Technologies H3C WX3000E Series Wireless Switches User Manual

Page 39

background image

25

Step Command

Remarks

3.

Specify RADIUS accounting

servers.

Specify the primary RADIUS
accounting server:

primary accounting { ip-address |

ipv6 ipv6-address } [ port-number |
key [ cipher | simple ] key | probe

username name [ interval interval ] ]

*

Specify a secondary RADIUS

accounting server:

secondary accounting { ip-address |
ipv6 ipv6-address } [ port-number |

key [ cipher | simple ] key | probe

username name [ interval interval ] ]
*

Configure at least one
command.
No accounting server is
specified by default.

4.

Set the maximum number of

real-time accounting attempts. retry realtime-accounting retry-times

Optional.
5 by default.

5.

Enable buffering of
stop-accounting requests to

which no responses are

received.

stop-accounting-buffer enable

Optional.
Enabled by default.

6.

Set the maximum number of
stop-accounting attempts.

retry stop-accounting retry-times

Optional.
500 by default.

NOTE:

The IP addresses of the primary and secondary accounting servers must be different from each other.
Otherwise, the configuration fails.

All servers for authentication/authorization and accountings, primary or secondary, must use IP
addresses of the same IP version.

If you delete an accounting server that is serving users, the device can no longer send real-time
accounting requests and stop-accounting requests for the users to that server, or buffer the

stop-accounting requests.

You can specify a RADIUS accounting server as the primary accounting server for one scheme and as
the secondary accounting server for another scheme at the same time.

RADIUS does not support accounting for FTP users.

Specifying the shared keys for authenticating RADIUS packets

The RADIUS client and RADIUS server use the MD5 algorithm to encrypt packets exchanged between

them and use shared keys to authenticate the packets. They must use the same shared key for the same

type of packets.
A shared key configured in this task is for all servers of the same type (accounting or authentication) in

the scheme, and has a lower priority than a shared key configured individually for a RADIUS server.
To specify shared keys for authenticating RADIUS packets:

Step Command

Remarks

1.

Enter system view.

system-view

N/A