HPE Moonshot 45Gc Security Configuration Manual page 36

•
If the device receives a response from the server within the interval, it sets the server to the
active state.
•
If the device does not receive any response from the server within the interval, it sets the server
to the blocked state.
The device refreshes the RADIUS server status at each detection interval according to the detection
result.
The device stops detecting the status of the RADIUS server when one of the following operations is
performed:
•
The RADIUS server is removed from the RADIUS scheme.
•
The test profile configuration is removed for the RADIUS server in RADIUS scheme view.
•
The test profile is deleted.
•
The RADIUS server is manually set to the blocked state.
•
The RADIUS scheme is deleted.
To configure a test profile for RADIUS server status detection:
Step
1. Enter system view.
2. Configure a test profile for
detecting the status of
RADIUS authentication
servers.
Creating a RADIUS scheme
Create a RADIUS scheme before performing any other RADIUS configurations. You can configure a
maximum of 16 RADIUS schemes. A RADIUS scheme can be used by multiple ISP domains.
To create a RADIUS scheme:
Step
1. Enter system view.
2. Create a RADIUS scheme
and enter RADIUS scheme
view.
Specifying the RADIUS authentication servers
A RADIUS authentication server completes authentication and authorization together, because
authorization information is piggybacked in authentication responses sent to RADIUS clients.
You can specify one primary authentication server and a maximum of 16 secondary authentication
servers for a RADIUS scheme. Secondary servers provide AAA services when the primary server
Command
system-view
radius-server test-profile
profile-name username name
[ interval interval ]
Command
system-view
radius scheme
radius-scheme-name
23
Remarks
N/A
By default, no test profiles exist.
You can configure multiple test
profiles in the system.
Remarks
N/A
The default setting depends on
the type of the startup
configuration:
•
If the device starts up with
initial settings, no RADIUS
scheme is defined.
•
If the device starts up with
the factory defaults, a
RADIUS scheme named
system is defined.
For more information about the
startup configuration, see
Fundamentals Configuration
Guide.