HP 5920 Command Reference Manual page 67
Hide thumbs
Also See for 5920:
- Command reference manual (607 pages) ,
- Configuration manual (424 pages) ,
- Fc and fcoe configuration manual (257 pages)
Table of Contents
Advertisement
Default
Every secondary RADIUS server specified in a RADIUS scheme is in active state.
Views
RADIUS scheme view
Predefined user roles
network-admin
Parameters
accounting: Sets the status of a secondary RADIUS accounting server.
authentication: Sets the status of a secondary RADIUS authentication server.
ip-address: Specifies the IPv4 address of a secondary RADIUS server.
port-number: Service port number of a secondary RADIUS server, a UDP port number in the range of 1
to 65535. The default port number of a secondary accounting server is 1813 and that of a secondary
authentication is 1812.
vpn-instance vpn-instance-name: Specifies the MPLS L3VPN to which the secondary RADIUS server
belongs, where vpn-instance-name is a case-sensitive string of 1 to 31 characters.
active: Specifies the active state, the normal operation state.
block: Specifies the blocked state, the out-of-service state.
Usage guidelines
If no IP address is specified, this command changes the status of all configured secondary RADIUS
servers.
If the device finds that a secondary server in active state is unreachable, the device changes the status of
the secondary server to blocked, starts a quiet timer for the server, and continues to try to communicate
with the next secondary server in active state (a secondary RADIUS server configured earlier has a
higher priority). When the quiet timer of a server times out, the status of the server changes to active
automatically. If you set the status of the server to blocked before the quiet timer times out, the status of
the server cannot change back to active automatically unless you set the status to active manually. If all
configured secondary servers are unreachable, the device considers the authentication or accounting
attempt a failure.
Examples
# Set the status of all the secondary authentication servers in RADIUS scheme radius1 to blocked.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] state secondary authentication block
Related commands
display radius scheme
•
state primary
•
55
Advertisement
Table of Contents
