beautypg.com

Enabling logging of radius packets, Displaying and maintaining radius – H3C Technologies H3C WX3000E Series Wireless Switches User Manual

Page 49

background image

35

Step Command

Remarks

1.

Enter system view.

system-view

N/A

2.

Enable the trap
function for RADIUS.

radius trap { accounting-server-down |
authentication-error-threshold |

authentication-server-down }

Disabled by default.

Enabling logging of RADIUS packets

You can enable the device to generate logs for RADIUS packets. However, the log function can affect
system performance.
To enable logging of RADIUS packets:

Step Command

Remarks

1.

Enter system view.

system-view

N/A

2.

Enable logging of RADIUS packets. radius log packet

Disabled by default.

Enabling the RADIUS listening port of the RADIUS client

Only after you enable the RADIUS listening port of a RADIUS client, can the client receive and send

RADIUS packets. If RADIUS is not required, disable the RADIUS listening port to avoid attacks that exploit

RADIUS packets.
To enable the RADIUS listening port of a RADIUS client:

Step Command

Remarks

1.

Enter system view.

system-view

N/A

2.

Enable the RADIUS listening
port of a RADIUS client.

radius client enable

Optional.
Enabled by default.

Displaying and maintaining RADIUS

Task Command

Remarks

Display the configuration of RADIUS
schemes.

display radius scheme
[ radius-scheme-name ] [ | { begin |
exclude | include } regular-expression ]

Available in any view

Display RADIUS packet statistics.

display radius statistics [ | { begin |
exclude | include } regular-expression ]

Available in any view

Display information about buffered

stop-accounting requests for which no
responses have been received.

display stop-accounting-buffer

{ radius-scheme radius-server-name |
session-id session-id | time-range

start-time stop-time | user-name

user-name } [ | { begin | exclude |
include } regular-expression ]

Available in any view

Clear RADIUS statistics.

reset radius statistics

Available in user view