Radius Nas-Ip - 3Com 5500G-EI Command Reference Manual

RADIUS Protocol Configuration Commands 383
Description
Use the command to configure the IP address and port
primary authentication
number for the primary RADIUS authentication/authorization. Use the
undo
command to restore the default IP address and port
primary authentication
number of the primary RADIUS authentication/authorization.
After creating a RADIUS server group, you are supposed to set IP addresses and
UDP port numbers for the RADIUS servers, including primary/second
authentication/authorization servers and accounting servers. In real networking
environments, the above parameters shall be set according to the specific
requirements. However, you set at least one authentication/authorization server
and an accounting server. Besides, ensure that the RADIUS service port settings on
the Switch is consistent with the port settings on the RADIUS server.
Related commands: , , .
key radius scheme state
Example
To set the IP address of the primary authentication/authorization server of RADIUS
server group, "3Com", to 10.110.1.1 and the UDP port 1812 to provide RADIUS
authentication/authorization service, enter the following:
<SW5500>system-view
System View: return to User View with Ctrl+Z.
[SW5500]radius scheme 3Com
[SW5500-radius-3Com]primary authentication 10.110.1.1 1812

radius nas-ip

Syntax
radius nas-ip ip-address
undo radius nas-ip
View
System View
Parameter
IP address in dotted decimal format.
ip-address:
Description
Use the command to specify the source address of the RADIUS
radius nas-ip
packet sent from NAS. Use the command to restore the
undo radius nas-ip
default setting.
By specifying the source address of the RADIUS packet, you can avoid unreachable
packets as returned from the server upon interface failure. The source address is
normally recommended to be a loopback interface address.
By default, the source address is not specified, that is, the address of the interface
sending the packet serves as the source address.
This command specifies only one source address; therefore, the newly configured
source address may overwrite the original one.