Primary Authentication - Huawei Quidway S8500 Series Command Manual

Command Manual – Security
Quidway S8500 Series Routing Switches
Description
Use the primary accounting command to configure the IP address and port number
for the primary accounting server.
Use the undo primary accounting command to restore the default IP address and
port number of the primary RADIUS accounting server. By default, the primary
accounting server of the RADIUS scheme created by the system, whose name is
"system", uses IP address of 127.0.0.1 and UDP port of 1646. The primary accounting
server of a newly created RADIUS scheme uses IP address of 0.0.0.0 and UDP port of
1813.
After creating a new RADIUS scheme, you need to set the IP address and the UDP port
for the RADIUS servers the scheme contains, such as authentication/authorization
server and accounting server. Besides, you can set primary and secondary server for
each kind of server. Although, in actual use, these settings depend on specific
demands, at least one authentication/authorization server and one accounting server is
required. Make sure the port settings on the switch about RADIUS service are identical
to those on the RADIUS servers.
Related command: key, radius scheme, state.
Example
# Set the IP address of the primary accounting server of RADIUS scheme, "huawei", to
10.110.1.2 and the UDP port 1813 to provide RADIUS accounting service.
[Quidway-radius-huawei] primary accounting 10.110.1.2 1813

2.2.13 primary authentication

Syntax
primary authentication ip-address [ port-number ]
undo primary authentication
View
RADIUS scheme view
Parameter
ip-address: IP address, in dotted decimal format.
port-number: Specifies UDP port number. ranging from 1 to 65535.
Description
Use the primary authentication command to configure the IP address and port
number for the primary RADIUS authentication/authorization.
Chapter 2 AAA and RADIUS/HWTACACS Protocol
Huawei Technologies Proprietary
2-34
Configuration Commands