H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 44)

30
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter RADIUS scheme view.
radius scheme
radius-scheme-name
N/A
3. Specify a source IP address
for outgoing RADIUS packets. nas-ip { ip-address | ipv6
ipv6-address }
By default, the IP address of the
outbound interface is used as the
source IP address.
Specifying a backup source IP address for outgoing RADIUS packets
In a stateful failover scenario, the active device authenticates portal users by interacting with the RADIUS
server, and synchronizes its online portal user information to the standby device through the backup link
established between them. The standby device only receives and processes synchronization messages
from the active device. However, when the active device fails, the RADIUS server does not send RADIUS
packets to the standby device because it does not know the IP address of the standby device. To solve this
problem, configure the source IP address for outgoing RADIUS packets on each device as the backup
source IP address for outgoing RADIUS packets on the other device. With such configuration, the active
device sends the source IP address for outgoing RADIUS packets that is configured on the standby device
to the RADIUS server, so that the RADIUS server can send unsolicited RADIUS packets to the standby
device.
You can specify a backup IP address for outgoing RADIUS packets in RADIUS scheme view for a specific
RADIUS scheme, or in system view for all RADIUS schemes. Before sending a RADIUS packet, a NAS
selects a backup source IP address in this order:
1. The backup source IP address specified for the RADIUS scheme.
2. The backup source IP address specified in system view.
If no backup source IP address is specified in the views, the NAS sends no backup source IP address to
the server.
To specify a backup source IP address for all RADIUS schemes:
Step Command Remarks
1. Enter system view. system-view N/A
2. Specify a backup source IP address
for outgoing RADIUS packets.
radius nas-backup-ip ip-address Not specified by default.
To specify a backup source IP address for a RADIUS scheme:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter RADIUS scheme view. radius scheme radius-scheme-name N/A
3. Specify a backup source IP
address for outgoing RADIUS
packets.
nas-backup-ip ip-address Not specified by default.