Security-Policy-Server - HP 3600 v2 Series Command Reference Manual

The IP addresses of the authentication/authorization servers and those of the accounting servers must be
of the same IP version.
The IP addresses of the primary and secondary authentication/authorization servers must be different
from each other. Otherwise, the configuration fails.
If the specified server resides on an MPLS VPN, specify the VPN by using the vpn-instance
vpn-instance-name option.
If you remove a secondary authentication server in use in the authentication process, the communication
with the secondary server will time out, and the switch will look for a server in active state from the
primary server on.
NOTE:
The shared key configured by this command takes precedence over that configured by using the key
•
accounting [ cipher | simple ]
The VPN specified by this command takes precedence over the VPN specified for the RADIUS scheme.
•
Related commands: key, state, and vpn-instance (RADIUS scheme view).
Examples
# For RADIUS scheme radius1, set the IP address of the secondary authentication/authorization server
to 10.1 10.1.2, the UDP port to 1812, and the shared key to the ciphertext string IT8Q4sHnitM=, and
specify to display the key in cipher text.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] secondary authentication 10.110.1.2 1812 key cipher IT8Q4sHnitM=
# Specify two secondary authentication/authorization servers for RADIUS scheme radius2, with the
server IP addresses of 10.1 10.1.1 and 10.1 10.1.2, and the UDP port number of 1813. Set the shared keys
to plaintext string hello and specify to display the key in plain text.
<Sysname> system-view
[Sysname] radius scheme radius2
[Sysname-radius-radius2] secondary authentication 10.110.1.1 1812 key simple hello
[Sysname-radius-radius2] secondary authentication 10.110.1.2 1812 key simple hello

security-policy-server

Syntax
security-policy-server ip-address
undo security-policy-server { ip-address | all }
View
RADIUS scheme view
Default level
2: System level
Parameters
ip-address: Specifies a security policy server by its IP address.
all: Specifies all security policy servers.
key
command.
67