Setting The Radius Packet Encryption Key; Setting Retransmission Times Of Radius Request Packet - Huawei Quidway S6500 Series Operation Manual

Operation Manual - Security
Quidway S6500 Series Ethernet Switches
V. Enabling the Selection of the Radius Accounting Option
Perform the following configurations in RADIUS scheme view.
Table 2-22 Enabling the selection of RADIUS accounting option
Enable the selection of RADIUS accounting option
Disable the selection of RADIUS accounting
option
This command can also be configured in ISP domain view. For details, refer to 2.2.1 VI.
Enabling accounting optional.

2.3.4 Setting the RADIUS Packet Encryption Key

RADIUS client (switch) and RADIUS server use MD5 algorithm to encrypt the
exchanged packets. The two ends verify the packet through setting the encryption key.
Only when the keys are identical can both ends to accept the packets from each other
end and give response.
You can use the following commands to set the encryption key for RADIUS packets.
Perform the following configurations in RADIUS scheme view.
Table 2-23 Setting the RADIUS packet encryption key
Set RADIUS authentication/authorization packet
encryption key
Restore
authentication/authorization packet encryption key.
Set RADIUS accounting packet key
Restore the default RADIUS accounting packet key
By default, the keys of RADIUS authentication/authorization and accounting packets
are all "huawei".

2.3.5 Setting Retransmission Times of RADIUS Request Packet

Since RADIUS protocol uses UDP packet to carry the data, the communication process
is not reliable. If the RADIUS server has not responded NAS before timeout, NAS has
to retransmit RADIUS request packet. If it transmits more than the specified retry-times,
NAS considers the communication with the primary and secondary RADIUS servers
has been disconnected.
Operation
Operation
the default
Huawei Technologies Proprietary
2-18
Chapter 2 AAA and RADIUS Protocol
Command
accounting optional
undo accounting optional
Command
key authentication string
RADIUS
undo key authentication
key accounting string
undo key accounting
Configuration