Changing The Dscp Priority For Radius Packets; Configuring The Device To Preferentially Process Radius Authentication Requests - H3C SR8800-F Configuration Manual

Change the authorization information of specific online users.
Shut down and then bring up the access interfaces of users.
Procedure
To configure the RADIUS DAS feature:
Step
1. Enter system view.
2. Enable the RADIUS DAS
feature and enter RADIUS
DAS view.
3. Specify a RADIUS DAC.
4. Specify the RADIUS DAS
port.

Changing the DSCP priority for RADIUS packets

The DSCP priority in the ToS field determines the transmission priority of RADIUS packets. A larger
value represents a higher priority.
To change the DSCP priority for RADIUS packets:
Step
1. Enter system view.
2. Change the DSCP priority
for RADIUS packets.
Configuring the device to preferentially process RADIUS
authentication requests
About configuring the device to preferentially process RADIUS authentication requests
RADIUS requests include RADIUS authentication requests, RADIUS accounting-start requests,
RADIUS accounting-update requests, and RADIUS accounting-stop requests. By default, the device
processes the RADIUS requests in the sequence that the requests are initiated.
When a large number of users go offline and then try to come online immediately, authentication
might fail for these users because of authentication request timeout. To resolve this issue, configure
the device to preferentially process authentication requests.
Restrictions and guidelines
Do not perform this task if the RADIUS server identifies users by the username and does not allow
repeated authentication for the same username. A violation might cause authentication failure for
users that try to come online immediately after going offline.
As a best practice, do not perform this task when the device has online users.
Procedure
To configure the device to preferentially process RADIUS authentication requests:
Command
system-view
radius dynamic-author server
client { ip ipv4-address | ipv6
ipv6-address } [ key { cipher |
simple } string | vpn-instance
vpn-instance-name ] *
port port-number
Command
system-view
radius [ ipv6 ] dscp dscp-value
40
Remarks
N/A
By default, the RADIUS DAS
feature is disabled.
By default, no RADIUS DACs are
specified.
By default, the RADIUS DAS port is
3799.
Remarks
N/A
By default, the DSCP priority is 0
for RADIUS packets.