Radius Client - H3C S3100 Series Command Manual

key string is not configured here, the shared key configured in the key command in RADIUS
scheme view will be used.
The IP addresses of the primary and secondary authentication/authorization servers cannot be the
same. Otherwise, the configuration fails.
Related commands: key, radius scheme, state.
Examples
# Set the IP address and UDP port number of the primary authentication/authorization server for
RADIUS scheme radius1 to 10.110.1.1 and 1812 respectively.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] radius scheme radius1
New Radius scheme
[Sysname-radius-radius1] primary authentication 10.110.1.1 1812
# Specify the IPv6 address of the primary authentication/authorization server for RADIUS scheme
radius1 as 1:1::2:3 and the UDP port of the server as 1812.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] primary authentication ipv6 1:1::2:3 1812

radius client

Syntax
radius client enable
undo radius client
View
System view
Parameters
None
Description
Use the radius client enable command to enable RADIUS authentication and accounting ports.
Use the undo radius client command to disable RADIUS authentication and accounting ports.
By default, RADIUS authentication and accounting ports are enabled.
If you want to use the switch as a RADIUS client, you need to ensure that the ports for RADIUS
authentication and accounting are open. Otherwise, you can disable the ports to improve security of the
switch.
Related commands: radius scheme.
1-49