Configuring Attributes Related To The Data Sent To The Radius Server - H3C S3610-28P Operation Manual

Operation Manual – AAA-RADIUS-HWTACACS
H3C S3610&S5510 Series Ethernet Switches
Set the status of the primary
RADIUS
authentication/authorization
server
Set the status of the primary
RADIUS accounting server
Set the status of the
secondary RADIUS
authentication/authorization
server
Set the status of the
secondary RADIUS
accounting server
Note:
If both the primary server and the secondary server are in the blocked state, it is
necessary to manually turn the secondary server to the active state so that the
secondary server can perform authentication. If the secondary server is still in the
blocked state, the primary/secondary switchover cannot take place.
If one server is in the active state while the other is blocked, the primary/secondary
switchover will not take place even if the active server is not reachable.

1.4.8 Configuring Attributes Related to the Data Sent to the RADIUS Server

Follow these steps to configure the attributes related to the data sent to the RADIUS
server:
Enter system view
Enable the RADIUS trap
function
Create a RADIUS scheme
and enter RADIUS
scheme view
Specify the format of the
username to be sent to a
RADIUS server
To do...
To do...
system-view
radius trap
{ accounting-server-do
wn |
authentication-server-d
own }
radius scheme
radius-scheme-name
user-name-format
{ with-domain |
without-domain }
Chapter 1 AAA/RADIUS/HWTACACS
Use the command...
state primary
authentication { active |
block }
state primary accounting
{ active | block }
state secondary
authentication { active |
block }
state secondary
accounting { active |
block }
Use the command...
1-29
Configuration
Remarks
Optional
active for every
server configured
with IP address in the
RADIUS scheme
Remarks
—
Optional
Disabled by default
Required
Not defined by default
Optional
By default, the ISP
domain name is included
in the username.