Configuring The Radius Dae Server Feature; Changing The Dscp Priority For Radius Packets - HP MSR Series Configuration Manual

Configuring the RADIUS DAE server feature

Dynamic Authorization Extensions (DAE) to RADIUS, defined in RFC 5176, can log off online users
or change their authorization information. DAE uses the client/server model.
In a RADIUS network, the RADIUS server typically acts as the DAE client and the NAS acts as the
DAE server.
When the RADIUS DAE server feature is enabled, the NAS performs the following operations:
1. Listens to the default or specified UDP port to receive DAE requests.
2. Logs off online users who match the criteria in the requests, or changes their authorization
information.
3. Sends DAE responses to the DAE client.
DAE defines the following types of packets:
•
Disconnect Messages (DMs)—The DAE client sends DM requests to the DAE server to log off
specific online users.
•
Change of Authorization Messages (CoA Messages)—The DAE client sends CoA requests
to the DAE server to change the authorization information of specific online users.
To configure the RADIUS DAE server feature:
Step
1. Enter system view.
2. Enable the RADIUS DAE
server feature and enter
RADIUS DAE server view.
3. Specify a RADIUS DAE
client.
4. Specify the RADIUS DAE
server port.

Changing the DSCP priority for RADIUS packets

The DSCP priority in the ToS field determines the transmission priority of RADIUS packets. A larger
value represents a higher priority.
To change the DSCP priority for RADIUS packets:
Step
1. Enter system view.
2. Change the DSCP priority
for RADIUS packets.
Command
system-view
radius dynamic-author server
client { ip ipv4-address | ipv6
ipv6-address } [ key { cipher |
simple } string | vpn-instance
vpn-instance-name ] *
port port-number
Command
system-view
radius [ ipv6 ] dscp dscp-value
55
Remarks
N/A
By default, the RADIUS DAE
server feature is disabled.
By default, no RADIUS DAE client
is specified.
By default, the RADIUS DAE
server port is 3799.
Remarks
N/A
By default, the DSCP priority is 0
for RADIUS packets.