HP 6125G Configuration Manual page 37

between the NAS and the RADIUS server, the source IP address of outgoing RADIUS packets must be a
public IP address of the NAS.
You can specify a source IP address for outgoing RADIUS packets in RADIUS scheme view for a specific
RADIUS scheme, or in system view for all RADIUS schemes whose servers are in the same VPN. Before
sending a RADIUS packet, a NAS selects a source IP address in the following order:
Source IP address specified for the RADIUS scheme.
•
• Source IP address specified in system view for the VPN.
IP address of the outbound interface specified by the route.
•
To specify a source IP address for all RADIUS schemes:
Step
1. Enter system view.
2. Specify a source IP
address for outgoing
RADIUS packets.
To specify a source IP address for a specific RADIUS scheme:
Step
1. Enter system view.
2. Enter RADIUS scheme view.
3. Specify a source IP address
for outgoing RADIUS packets.
Setting timers for controlling communication with RADIUS servers
The switch uses the following types of timers to control the communication with a RADIUS server:
• Server response timeout timer (response-timeout)—Defines the RADIUS request retransmission
interval. After sending a RADIUS request (authentication/authorization or accounting request), the
switch starts this timer. If the switch receives no response from the RADIUS server before this timer
expires, it resends the request.
Server quiet timer (quiet)—Defines the duration to keep an unreachable server in blocked state. If
•
a server is not reachable, the switch changes the server's status to blocked, starts this timer for the
server, and tries to communicate with another server in active state. After this timer expires, the
switch changes the status of the server back to active.
Real-time accounting timer (realtime-accounting)—Defines the interval at which the switch sends
•
real-time accounting packets to the RADIUS accounting server for online users. To implement
real-time accounting, the switch must periodically send real-time accounting packets to the
accounting server for online users.
To set timers for controlling communication with RADIUS servers:
Step
1. Enter system view.
Command
system-view
radius nas-ip { ip-address |
ipv6 ipv6-address }
[ vpn-instance
vpn-instance-name ]
Command
system-view
radius scheme
radius-scheme-name
nas-ip { ip-address | ipv6
ipv6-address }
Command
system-view
27
Remarks
N/A
By default, the IP address of the outbound
interface is used as the source IP address.
Remarks
N/A
N/A
By default, the IP address of the
outbound interface is used as the
source IP address.
Remarks
N/A