Primary Authentication (Radius Scheme View) - HP 5120 SI series Command Reference Manual

Hide thumbs Also See for 5120 SI series:
Table of Contents

Advertisement

If neither cipher nor simple is specified, you set a plaintext shared key string.
Description
Use the primary accounting command to specify the primary RADIUS accounting server.
Use the undo primary accounting command to remove the configuration.
By default, no primary RADIUS accounting server is specified.
The IP addresses of the primary and secondary accounting servers cannot be the same. Otherwise, the
configuration fails.
The RADIUS service port configured on the device and that of the RADIUS server must be consistent.
The shared key configured on the device for accounting packets and that configured on the RADIUS
server must be consistent.
The shared key configured by this command takes precedence over that configured by using the key
accounting [ cipher | simple ] key command.
The IP addresses of the primary and secondary accounting servers must be of the same IP version.
The IP addresses of the accounting servers and those of the authentication/authorization servers must be
of the same IP version.
If you change the primary accounting server when the device is already sending a start-accounting
request to the server, the communication with the original primary server will time out, and then the
device will look for a server in active state from scratch: the new primary server is evaluated at first and
then the secondary servers according to the order in which they are configured.
If you remove an accounting server being used by online users, the device cannot send real-time
accounting requests and stop-accounting requests anymore for the users, and does not buffer the
stop-accounting requests.
For security purposes, all shared keys, including shared keys configured in plain text, are saved in
ciphertext.
Related commands: key, radius scheme, and state.
Examples
# Specify the IP address of the primary accounting server for RADIUS scheme radius1 as 10.1 10.1.2 and
the UDP port of the server as 1813.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] primary accounting 10.110.1.2 1813

primary authentication (RADIUS scheme view)

Syntax
primary authentication { ipv4-address | ipv6 ipv6-address } [ port-number | key [ cipher | simple ] key
| probe username name [ interval interval ] ] *
undo primary authentication
View
RADIUS scheme view
50

Hide quick links:

Advertisement

Table of Contents
loading

Table of Contents