Configuring Radius Authentication/Authorization Servers - H3C S3610 Series Operation Manual

Operation Manual – AAA & RADIUS & HWTACACS
H3C S3610&S5510 Series Ethernet Switches

1.4.2 Configuring RADIUS Authentication/Authorization Servers

Table 1-13 Configure RADIUS authentication/authorization server
Enter system view
Create a RADIUS scheme
and enter its view
Set the IP address and port
number
RADIUS
authentication/authorization
server
Set the IP address and port
number of the secondary
RADIUS
authentication/authorization
server
Caution:
The authentication response sent from the RADIUS server to the RADIUS client
carries the authorization information. Therefore, no separate authorization server
can be specified.
In an actual network environment, you can either specify two RADIUS servers as
the primary and secondary authentication/authorization servers respectively, or
specify
authentication/authorization servers.
The IP address and port number of the primary authentication server used by the
default RADIUS scheme "system" are 127.0.0.1 and 1645.
You are not allowed to assign the same IP address to both primary and secondary
authentication/authorization servers; otherwise, unsuccessful operation is prompted
Operation
of the primary
only one server
Chapter 1 AAA & RADIUS & HWTACAC
Command
system-view —
Required
radius scheme
By
radius-scheme-na
scheme named "system" has
me
already been created in the
system.
Required
primary
By default, the IP address and
authentication
UDP port number of the
ip-address
primary server are 0.0.0.0
[ port-number ]
and 1812 respectively.
Optional
secondary
By default, the IP address and
authentication
UDP port number of the
ip-address
secondary server are 0.0.0.0
[ port-number ]
and 1812 respectively.
as both the
1-26
S Configuration
Description
default, a RADIUS
primary and secondary