Configuring Radius Accounting Servers And The Related Attributes - 3Com 3C13636 Configuration Manual

3Com Router 3000 Ethernet Family
Configuration Guide
As the authorization information from the RADIUS server is sent to RADIUS clients in
authentication response packets, so you do not need to specify a separate
authorization server.
In real networking environments, you may specify two RADIUS servers as primary and
secondary authentication/authorization servers respectively, or specify one server to
function as both.

2.3.3 Configuring RADIUS Accounting Servers and the Related Attributes

I. Configuring RADIUS accounting servers
You can use the following commands to configure IP address and port number of
RAIUDS accounting servers.
Perform the following configuration in RADIUS view.
Table 2-16 Configure IP address and port number of RADIUS accounting servers
Configure IP address and port number of the
primary RADIUS accounting server.
Restore the default IP address and port number
of the primary RADIUS accounting server.
Configure IP address and port number of the
secondary RADIUS accounting server.
Restore the default IP address and port number
of the secondary RADIUS accounting server.
In practice, you can specify two RADIUS servers as the primary and the secondary
accounting servers respectively; or specify one server to function as both.
For normal interaction between the NAS and a RADIUS server, you must ensure the
connectivity of the routes between the RADIUS server and the NAS before configuring
the IP address and UDP port of the RADIUS server. In addition, since RADIUS uses
different UDP ports for authentication/authorization and accounting, you must assign
different numbers to the authentication/authorization port and the accounting port,
which are 1812 and 1813 respectively as recommended by RFC2138/2139. You can
assign port numbers different from the two recommended in the RFC, however. (For
example, in the early stage of RADIUS server implementation, 1645 and 1646 were
often assigned to the authentication/authorization port and accounting port). When
doing this, make sure that the port settings on the router and the RADIUS server are
consistent.
By default, IP address of the primary/secondary accounting server is 0.0.0.0; the UDP
port number of the accounting server is 1813.
Chapter 2 AAA and RADIUS/HWTACACS Protocol
Operation
3Com Corporation
2-20
Configuration
Command
primary accounting
ip-address [ port-number ]
undo primary accounting
secondary accounting
ip-address [ port-number ]
undo secondary accounting