HP 3600 v2 Series Security Configuration Manual page 32

Task
Setting the maximum number of RADIUS request transmission attempts
Setting the status of RADIUS servers
Specifying the source IP address for outgoing RADIUS packets
Specifying a backup source IP address for outgoing RADIUS packets
Setting timers for controlling communication with RADIUS servers
Configuring RADIUS accounting-on
Configuring the IP address of the security policy server
Configuring interpretation of RADIUS class attribute as CAR parameters
Enabling the trap function for RADIUS
Enabling the RADIUS listening port of the RADIUS client
Displaying and maintaining RADIUS
Creating a RADIUS scheme
Before performing other RADIUS configurations, follow these steps to create a RADIUS scheme and enter
RADIUS scheme view:
To do...
Enter system view
Create a RADIUS scheme and
enter RADIUS scheme view
NOTE:
A RADIUS scheme can be referenced by multiple ISP domains at the same time.
Specifying the RADIUS authentication/authorization servers
You can specify one primary authentication/authorization server and up to 16 secondary
authentication/authorization servers for a RADIUS scheme. When the primary server is not available, a
secondary server is used, if any. In a scenario where redundancy is not required, specify only the
primary server.
In RADIUS, user authorization information is piggybacked in authentication responses sent to RADIUS
clients. It is neither allowed nor needed to specify a separate RADIUS authorization server.
Follow these steps to specify RADIUS authentication/authorization servers for a RADIUS scheme:
Use the command...
system-view
radius scheme
radius-scheme-name
21
Remarks
Optional
Optional
Optional
Optional
Optional
Optional
Optional
Optional
Optional
Optional
Optional
Remarks
—
Required
No RADIUS scheme by default