Nas-Ip (Radius Scheme View) - HP A5500 EI Command Reference Manual

Hide thumbs Also See for A5500 EI:
Table of Contents

Advertisement

Examples
# For the device working in stateful failover mode, specify the source IP address and backup source IP
address for RADIUS packets as 2.2.2.2 and 3.3.3.3, respectively.
<Sysname> system-view
[Sysname] radius scheme aaa
[Sysname-radius-aaa] nas-ip 2.2.2.2
[Sysname-radius-aaa] nas-backup-ip 3.3.3.3
On the backup device, you need to specify the source IP address and backup source IP address for
RADIUS packets as 3.3.3.3 and 2.2.2.2 respectively.

nas-ip (RADIUS scheme view)

Syntax
nas-ip { ip-address | ipv6 ipv6-address }
undo nas-ip
View
RADIUS scheme view
Default level
2: System level
Parameters
ip-address: IPv4 address in dotted decimal notation. It must be an address of the device and cannot be
0.0.0.0, 255.255.255.255, a class D address, a class E address, or a loopback address.
ipv6 ipv6-address: Specifies an IPv6 address. It must be an address of the device and must be a unicast
address that is neither a loopback address nor a link-local address.
Description
Use the nas-ip command to specify a source IP address for outgoing RADIUS packets.
Use the undo nas-ip command to restore the default.
By default, the source IP address of an outgoing RADIUS packet is that configured with the radius nas-ip
command in system view.
The source IP address of RADIUS packets that a NAS sends must match the IP address of the NAS that is
configured on the RADIUS server. A RADIUS server identifies a NAS by its IP address. Upon receiving a
RADIUS packet, a RADIUS server checks whether the source IP address of the packet is the IP address of
any managed NAS. If yes, the server processes the packet. If not, the server drops the packet.
The source IP address specified for outgoing RADIUS packets must be of the same IP version as the IP
addresses of the RADIUS servers in the RADIUS scheme. Otherwise, the source IP address configuration
does not take effect.
NOTE:
The setting by the nas-ip command in RADIUS scheme view is only for the RADIUS scheme, whereas the
setting by the radius nas-ip command in system view is for all RADIUS schemes. The setting in RADIUS
scheme view takes precedence.
Related commands: radius nas-ip.
49

Advertisement

Table of Contents
loading

This manual is also suitable for:

A5500 si

Table of Contents