Table of Contents
Advertisement
Parameters
ipv4-address: Specifies an IPv4 address, which must be an address of the device. The IP address
cannot be 0.0.0.0, 255.255.255.255, a class D address, a class E address, or a loopback address.
ipv6 ipv6-address: Specifies an IPv6 address, which must be a unicast address of the device and
cannot be a loopback address or a link-local address.
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance to which the source IP
address belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters.
To configure a public-network source IP address, do not specify this option.
Usage guidelines
The source IP address of RADIUS packets that a NAS sends must match the IP address of the NAS
that is configured on the RADIUS server. A RADIUS server identifies a NAS by its IP address. Upon
receiving a RADIUS packet, a RADIUS server checks whether the source IP address of the packet is
the IP address of a managed NAS.
•
If the source IP address of the packet is the IP address of a managed NAS, the server
processes the packet.
•
If the source IP address of the packet is not the IP address of a managed NAS, the server drops
the packet.
As a best practice, specify a loopback interface address as the source IP address for outgoing
RADIUS packets to avoid RADIUS packet loss caused by physical port errors.
If you use both the nas-ip command and radius nas-ip command, the following guidelines apply:
•
The setting configured by using the nas-ip command in RADIUS scheme view applies only to
the RADIUS scheme.
•
The setting configured by using the radius nas-ip command in system view applies to all
RADIUS schemes.
•
The setting in RADIUS scheme view takes precedence over the setting in system view.
You can specify a maximum of 16 source IP addresses in system view, including:
•
Zero or one public-network source IPv4 address.
•
Zero or one public-network source IPv6 address.
•
Private-network source IP addresses.
Each VPN instance can have only one private-network source IPv4 address and one private-network
source IPv6 address in system view.
Examples
# Specify IP address 129.10.10.1 as the source address for outgoing RADIUS packets.
<Sysname> system-view
[Sysname] radius nas-ip 129.10.10.1
Related commands
nas-ip (RADIUS scheme view)
radius scheme
Use radius scheme to create a RADIUS scheme and enter its view, or enter the view of an existing
RADIUS scheme.
Use undo radius scheme to delete a RADIUS scheme.
Syntax
radius scheme radius-scheme-name
94
Advertisement
Table of Contents
