Configuring An Ip Address For The Security Policy Server; Enabling The Listening Port Of The Radius Client - 3Com MSR 50 Series Configuration Manual

1776 C 93: AAA/RADIUS/HWTACACS C
HAPTER
Configuring an IP
Address for the Security
Policy Server
Enabling the Listening
Port of the RADIUS
Client
ONFIGURATION
To do...
Enter system view
Create RADIUS scheme and
enter its view
Enable accounting-on
Set the number of
accounting-on packet
retransmission attempts
Set the retransmission interval
of accounting-on packets
n
If the system has no authentication scheme enabled with the accounting-on
function when you execute the accounting-on enable command, you need to
save the configuration and restart the device so that the command takes effect.
Otherwise, the command takes effect immediately.
For a Portal+ enabled device, a security policy server is necessary for security check
of users accessing the network through the device. The security policy server
determines whether a user can access the intended network resources.
For details about Portal+, refer to
Follow these steps to configure an IP address for the security policy server:
To do...
Enter system view
Create RADIUS scheme
and enter its view
Configure an IP address
for the security policy
server
n
If more than one interface of the device is enabled with Portal, the interfaces
■
may use different security policy servers. You can specify up to eight security
policy servers for a RADIUS scheme.
If the RADIUS server and the security policy server reside on the same physical
■
device, you do not need to configure the IP address of the security policy
server.
The specified security policy server must be a security policy server or RADIUS
■
server that is correctly configured and working normally. Otherwise, the device
will regard it as an illegal server.
Follow these steps to enable the listening port of the RADIUS client. With the
listening port enabled, the RADIUS client can send and receive RADIUS packets
through the port.
Use the command...
system-view
radius scheme
radius-scheme-name
accounting-on enable
accounting-on enable send
send-times
accounting-on enable
interval seconds
"Portal Configuration" on page
Use the command...
system-view
radius scheme
radius-scheme-name
security-policy-server
ip-address
Remarks
-
Required
By default, no RADIUS scheme
is defined.
Required
Disabled by default
Optional
5 times by default
Optional
3 seconds by default
1851.
Remarks
-
Required
By default, no RADIUS scheme is
defined.
Optional
By default, no IP address is configured
for the security policy server.