Specifying The Radius Accounting Servers And Relevant Parameters - H3C S9500E Series Security Configuration Manual

HP recommends that you specify only the primary RADIUS authentication/authorization server if backup
•
is not required.
If both the primary and secondary authentication/authorization servers are specified, the secondary one
•
is used when the primary one is unreachable.
In practice, you may specify one RADIUS server as the primary authentication/authorization server and
•
up to 16 RADIUS servers as the secondary authentication/authorization servers, or specify a RADIUS
server as the primary authentication/authorization server for a scheme and as the secondary
authentication/authorization server for another scheme at the same time.
The IP addresses of the primary and secondary authentication/authorization servers for a scheme must be
•
different from each other. Otherwise, the configuration fails.
All servers for authentication/authorization and accountings, primary or secondary, must use IP
•
addresses of the same IP version.
Specifying the RADIUS accounting servers and relevant
parameters
Follow these steps to specify the RADIUS accounting servers and perform related configurations:
To do...
1. Enter system view
2. Enter RADIUS scheme view
3. Specify the primary RADIUS
accounting server
4. Specify the secondary RADIUS
accounting server
5. Enable the switch to buffer stop-
accounting requests getting no
responses
6. Set the maximum number of
stop-accounting request
transmission attempts
7. Set the maximum number of
accounting request transmission
attempts
It is recommended to specify only the primary RADIUS accounting server if backup is not required.
•
Use the command...
system-view
radius scheme radius-scheme-name
primary accounting { ip-address [
port-number | key string | vpn-
instance vpn-instance-name ] * |
ipv6 ipv6-address [ port-number |
key string] * }
secondary accounting { ip-address
[ port-number | key string | vpn-
instance vpn-instance-name ] * |
ipv6 ipv6-address [ port-number |
key string ] * }
stop-accounting-buffer enable
retry stop-accounting retry-times
retry realtime-accounting retry-
times
40
Remarks
—
—
Required
Configure at least one of the
commands
No accounting server by
default
Optional
Enabled by default
Optional
500 by default
Optional
5 by default