Port - H3C MSR Series Command Reference Manual

Comware 7 security
Hide thumbs Also See for MSR Series:
Table of Contents

Advertisement

As a best practice to avoid RADIUS packet loss caused by physical port errors, specify a loopback
interface address as the source IP address for outgoing RADIUS packets.
If you use both the nas-ip command and radius nas-ip command, the following guidelines apply:
The setting configured by using the nas-ip command in RADIUS scheme view applies only to
the RADIUS scheme.
The setting configured by using the radius nas-ip command in system view applies to all
RADIUS schemes.
The setting in RADIUS scheme view takes precedence over the setting in system view.
A RADIUS scheme can have only one source IPv4 address and one source IPv6 address for
outgoing RADIUS packets.
If you do not specify the ipv6 keyword for the undo nas-ip command, the command deletes the
source IPv4 address for outgoing RADIUS packets.
Examples
# In RADIUS scheme radius1, specify the IP address 10.1.1.1 as the source IP address for outgoing
RADIUS packets.
<Sysname> system-view
[Sysname] radius scheme radius1
[Sysname-radius-radius1] nas-ip 10.1.1.1
Related commands
display radius scheme
radius nas-ip

port

Use port to specify the RADIUS DAS port.
Use undo port to restore the default.
Syntax
port port-number
undo port
Default
The RADIUS DAS port number is 3799.
Views
RADIUS DAS view
Predefined user roles
network-admin
Parameters
port-number: Specifies a UDP port number in the range of 1 to 65535.
Usage guidelines
The destination port in DAE packets on the DAC must be the same as the RADIUS DAS port on the
DAS.
Examples
# Enable the RADIUS DAS to listen to UDP port 3790 for DAE requests.
<Sysname> system-view
98

Advertisement

Table of Contents
loading

Table of Contents