Download Print this page

HP FlexNetwork MSR Series Command Reference Manual page 30

Comware 7 security
Hide thumbs Also See for FlexNetwork MSR Series:

Advertisement

Predefined user roles
network-admin
Parameters
broadcast: Broadcasts accounting requests to servers in RADIUS schemes.
radius-scheme radius-scheme-name1: Specifies the primary broadcast RADIUS scheme by its
name, a case-insensitive string of 1 to 32 characters.
radius-scheme radius-scheme-name2: Specifies the backup broadcast RADIUS scheme by its
name, a case-insensitive string of 1 to 32 characters.
hwtacacs-scheme hwtacacs-scheme-name: Specifies an HWTACACS scheme by its name, a
case-insensitive string of 1 to 32 characters.
local: Performs local accounting.
none: Does not perform accounting.
radius-scheme radius-scheme-name: Specifies a RADIUS scheme by its name, a case-insensitive
string of 1 to 32 characters.
Usage guidelines
You can specify one primary accounting method and multiple backup accounting methods.
When the primary method is invalid, the device attempts to use the backup methods in sequence.
For example, the accounting ppp radius-scheme radius-scheme-name local none command
specifies a primary RADIUS accounting method and two backup methods (local accounting and no
accounting). The device performs RADIUS accounting by default and performs local accounting
when the RADIUS server is invalid. The device does not perform accounting when both of the
previous methods are invalid.
The following guidelines apply to broadcast accounting:
The device sends accounting requests to the primary accounting servers in the specified
broadcast RADIUS schemes at the same time. If a primary server is unavailable, the device
sends accounting requests to the secondary servers of the scheme in the order the servers are
configured.
The accounting result is determined by the primary broadcast RADIUS scheme. The
accounting result from the backup scheme is used as reference only. If the primary scheme
does not return any result, the device considers the accounting as a failure.
Examples
# In ISP domain test, perform local accounting for PPP users.
<Sysname> system-view
[Sysname] domain test
[Sysname-isp-test] accounting ppp local
# In ISP domain test, perform RADIUS accounting for PPP users based on scheme rd and use local
accounting as the backup.
<Sysname> system-view
[Sysname] domain test
[Sysname-isp-test] accounting ppp radius-scheme rd local
# In ISP domain test, broadcast accounting requests of PPP users to RADIUS servers in schemes
rd1 and rd2, and use local accounting as the backup.
<Sysname> system-view
[Sysname] domain test
[Sysname-isp-test] accounting ppp broadcast radius-scheme rd1 radius-scheme rd2 local
12

Advertisement

loading