Setting Ip Address And Port Number Of A Radius Server - H3C S9500 Series Operation Manual

Operation Manual – AAA RADIUS HWTACACS
H3C S9500 Series Routing Switches
Setting the Port State of RADIUS Client
Specifying the Security Policy Servers
Configuring a Local RADIUS Authentication Server
Among the above tasks, creating RADIUS scheme and setting IP address of RADIUS
server are required, while other takes are optional and can be performed as your
requirements.
1.3.1 Creating/Deleting a RADIUS scheme
As mentioned above, RADIUS protocol configurations are performed on the per
RADIUS scheme basis. Therefore, before performing other RADIUS protocol
configurations, it is compulsory to create the RADIUS scheme and enter its view.
You can use the following commands to create/delete a RADIUS scheme.
Perform the following operations in system view to create/delete RADIUS server group:
Create a RADIUS server group
and enter its view
Delete a RADIUS server group
Several ISP domains can use a RADIUS server group at the same time. You can
configure up to 16 RADIUS schemes, including the default server group named as
System.
By default, the system has a RADIUS scheme named system whose attributes are all
default values.

1.3.2 Setting IP Address and Port Number of a RADIUS Server

After creating a RADIUS scheme, you need to set IP addresses and UDP port numbers
for the RADIUS servers, including primary/secondary authentication/authorization
servers and accounting servers. So you can configure up to 4 groups of IP addresses
and UDP port numbers. However, at least you have to set one group of IP address and
UDP port number for each pair of primary/secondary servers to ensure the normal AAA
operation.
You can use the following commands to configure the IP address and port number for
RADIUS schemes.
Perform the following operations in RADIUS scheme view to configure the IP address
and port number of RADIUS server:
To do...
1-15
Chapter 1 AAA, RADIUS and HWTACACS
Use the command...
radius scheme radius-server-name
undo radius scheme radius-server-name
Protocol Configuration