Specifying The Radius Authentication/Authorization Servers; Specifying The Radius Accounting Servers And Relevant Parameters - H3C S5120-EI Series Operation Manual

To do...
Enter system view
Create a RADIUS scheme and
enter RADIUS scheme view
A RADIUS scheme can be referenced by more than one ISP domain at the same time.

Specifying the RADIUS Authentication/Authorization Servers

Follow these steps to specify the RADIUS authentication/authorization servers:
To do...
Enter system view
Create a RADIUS scheme and
enter RADIUS scheme view
Specify the primary RADIUS
authentication/authorization server
Specify the secondary RADIUS
authentication/authorization server
It is recommended to specify only the primary RADIUS authentication/authorization server if
backup is not required.
If both the primary and secondary authentication/authorization servers are specified, the
secondary one is used when the primary one is unreachable.
In practice, you may specify two RADIUS servers as the primary and secondary
authentication/authorization servers respectively. At one time, a server can be the primary
authentication/authorization server for a scheme and the secondary authentication/authorization
servers for another scheme.
The IP addresses of the primary and secondary authentication/authorization servers for a scheme
cannot be the same. Otherwise, the configuration fails.

Specifying the RADIUS Accounting Servers and Relevant Parameters

Follow these steps to specify the RADIUS accounting servers and perform related configurations:
To do...
Enter system view
Create a RADIUS scheme and
enter RADIUS scheme view
Use the command...
system-view
radius scheme
radius-scheme-name
Use the command...
system-view
radius scheme
radius-scheme-name
primary authentication
ip-address [ port-number ]
secondary authentication
ip-address [ port-number ]
Use the command...
system-view
radius scheme
radius-scheme-name
1-23
Remarks
—
Required
Not defined by default
Remarks
—
Required
Not defined by default
Required
Configure at least one of the
commands
No authentication server by default
Remarks
—
Required
Not defined by default