HP FlexFabric 7900 Series Command Reference Manual page 51

undo secondary authentication [ ipv4-address [ port-number ] ]
Default
No secondary RADIUS authentication server is specified.
Views
RADIUS scheme view
Predefined user roles
network-admin
Parameters
ipv4-address: Specifies the IPv4 address of the secondary RADIUS authentication server.
port-number: Sets the service port number of the secondary RADIUS authentication server, a UDP port
number in the range of 1 to 65535. The default setting is 1812.
key { cipher | simple } string: Sets the shared key for secure communication with the secondary RADIUS
authentication server.
cipher string: Sets a ciphertext shared key. The string argument is case sensitive.
•
In non-FIPS mode, the key is a string of 1 to 1 17 characters.
In FIPS mode, the key is a string of 15 to 1 17 characters.
simple string: Sets a plaintext shared key. The string argument is case sensitive.
•
In non-FIPS mode, the key is a string of 1 to 64 characters.
In FIPS mode, the key is a string of 15 to 64 characters and must contain digits, uppercase letters,
lowercase letters, and special characters.
Usage guidelines
Make sure that the port number and shared key settings of each secondary RADIUS authentication server
are the same as those configured on the corresponding server.
You can configure up to 16 secondary RADIUS authentication servers for a RADIUS scheme. If the
primary server fails, the device tries to communicate with a secondary server in active state. The device
connects to the secondary servers in the order they are configured.
Two authentication servers specified for a scheme, primary or secondary, cannot have identical IP
address and port number settings.
The shared key configured by this command takes precedence over the shared key configured with the
key authentication command.
If you use the secondary authentication command to modify or delete a secondary authentication server
during an authentication process, communication with the secondary server times out. The device tries to
communicate with an active server that has the highest priority for authentication.
For security purposes, all shared keys, including shared keys configured in plain text, are saved in
ciphertext.
Examples
# For RADIUS scheme radius1, specify a secondary authentication server with the IP address 10.1 10.1.2
and the UDP port 1812.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] secondary authentication 10.110.1.2 1812
44