Table of Contents
Advertisement
Predefined user roles
network-admin
mdc-admin
Parameters
broadcast: Broadcasts accounting requests to servers in RADIUS schemes.
radius-scheme radius-scheme-name1: Specifies the primary broadcast RADIUS scheme by its
name, a case-insensitive string of 1 to 32 characters.
radius-scheme radius-scheme-name2: Specifies the backup broadcast RADIUS scheme by its
name, a case-insensitive string of 1 to 32 characters.
local: Performs local accounting.
none: Does not perform accounting.
radius-scheme radius-scheme-name: Specifies a RADIUS scheme by its name, a case-insensitive
string of 1 to 32 characters.
Usage guidelines
You can specify one primary accounting method and multiple backup accounting methods.
When the primary method is invalid, the device attempts to use the backup methods in sequence.
For example, the accounting lan-access radius-scheme radius-scheme-name local none
command specifies a primary RADIUS accounting method and two backup methods (local
accounting and no accounting). The device performs RADIUS accounting by default and performs
local accounting when the RADIUS server is invalid. The device does not perform accounting when
both of the previous methods are invalid.
The following guidelines apply to broadcast accounting:
•
The device sends accounting requests to the primary accounting servers in the specified
broadcast RADIUS schemes at the same time. If the primary server is unavailable in a scheme,
the device sends accounting requests to the secondary servers of the scheme in the order the
servers are configured.
•
The accounting result is determined by the primary broadcast RADIUS scheme. The
accounting result from the backup scheme is used as reference only. If the primary scheme
does not return any result, the device considers the accounting as a failure.
Examples
# In ISP domain test, perform local accounting for LAN users.
<Sysname> system-view
[Sysname] domain test
[Sysname-isp-test] accounting lan-access local
# In ISP domain test, perform RADIUS accounting for LAN users based on scheme rd and use local
accounting as the backup.
<Sysname> system-view
[Sysname] domain test
[Sysname-isp-test] accounting lan-access radius-scheme rd local
# In ISP domain test, broadcast accounting requests of LAN users to RADIUS servers in schemes
rd1 and rd2, and use local accounting as the backup.
<Sysname> system-view
[Sysname] domain test
[Sysname-isp-test] accounting lan-access broadcast radius-scheme rd1 radius-scheme rd2
local
6
Advertisement
Table of Contents
