Radius Nas-Ip - HP 6125XLG Command Reference Manual

radius nas-ip

Use radius nas-ip to specify a source address for outgoing RADIUS packets.
Use undo radius nas-ip to delete a source address for outgoing RADIUS packets.
Syntax
radius nas-ip { ipv4-address | ipv6 ipv6-address } [ vpn-instance vpn-instance-name ]
undo radius nas-ip { ipv4-address | ipv6 ipv6-address } [ vpn-instance vpn-instance-name ]
Default
The source IP address of an outgoing RADIUS packet is the IP address of the outbound interface.
Views
System view
Predefined user roles
network-admin
Parameters
ipv4-address: Specifies an IPv4 address, which must be an address of the device and cannot be 0.0.0.0,
255.255.255.255, a class D address, a class E address, or a loopback address.
ipv6 ipv6-address: Specifies an IPv6 address, which must be a unicast address of the device and cannot
be a loopback address or a link-local address.
vpn-instance vpn-instance-name: Specifies the MPLS L3VPN to which the source IPv4 address belongs,
where vpn-instance-name is a case-sensitive string of 1 to 31 characters. To configure a public-network
source IPv4 address, do not specify this option.
Usage guidelines
The source IP address of RADIUS packets that a NAS sends must match the IP address of the NAS that
is configured on the RADIUS server. A RADIUS server identifies a NAS by its IP address. Upon receiving
a RADIUS packet, a RADIUS server checks whether the source IP address of the packet is the IP address
of a managed NAS. If yes, the server processes the packet. If not, the server drops the packet.
If no source IP address is specified for outgoing RADIUS packets, packets returned from the server cannot
reach the device due to a physical port error.
You can specify up to 16 source IP addresses, including zero or one public-network source IPv4 address,
zero or one public-network source IPv6 address, and private-network source IP addresses. A newly
specified public-network source IP address overwrites the previous one. Each VPN can have at most one
private-network source IPv4 address and one private-network source IPv6 address.
The setting configured by the nas-ip command in RADIUS scheme view is only for the RADIUS scheme,
whereas that configured by the radius nas-ip command in system view is for all RADIUS schemes. The
setting in RADIUS scheme view takes precedence.
Examples
# Set the IP address for the device to use as the source address of the RADIUS packets to 129.10.10.1.
<Sysname> system-view
[Sysname] radius nas-ip 129.10.10.1
Related commands
nas-ip (RADIUS scheme view)
41