Radius Nas - H3C S5120-SI Series Command Reference Manual

Note that when the listening port of the RADIUS client is disabled:
The RADIUS client can either accept authentication, authorization or accounting requests or
process timer messages. However, it fails to transmit and receive packets to and from the RADIUS
server.
The end account packets of online users cannot be sent out and buffered. This may cause a
problem that the RADIUS server still has the user record after a user goes offline for a period of
time.
The authentication, authorization and accounting turn to the local scheme after the RADIUS
request fails if the RADIUS scheme and the local authentication, authorization and accounting
scheme are configured.
The buffered accounting packets cannot be sent out and will be deleted from the buffer when the
configured maximum number of attempts is reached.
Examples
# Enable the listening port of the RADIUS client.
<Sysname> system-view
[Sysname] radius client enable
radius nas-ip
Syntax
radius nas-ip ip-address
undo radius nas-ip
View
System view
Default Level
2: System level
Parameters
ip-address: IPv4 address in dotted decimal notation. It must be an address of the device and cannot be
0.0.0.0, 255.255.255.255, a class D address, a class E address, or a loopback address.
Description
Use the radius nas-ip command to specify the IP address for the device to use as the source address
of the RADIUS packets to be sent to the server.
Use the undo radius nas-ip command to remove the configuration.
By default, the source IP address of a packet sent to the server is the IP address of the outbound port.
Note that:
Specifying a source address for the RADIUS packets to be sent to the server can avoid the
situation where the packets sent back by the RADIUS server cannot reach the device as the result
of a physical interface failure.
If you configure the command for more than one time, the last configuration takes effect.
2-14